RE
Vendor
RealMag777
15 products with CVEs on record
31
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-107646
HP
HUSKY – Products Filter for WooCommerce Professional
realmag777
5.3
0%
Oct 16HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script
CVE-2026-95526
BE
BEAR
RealMag777
7.3
0%
Oct 6WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-92969
HP
HUSKY – Products Filter for WooCommerce Professional
realmag777
8.1
1%
Sep 22HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
CVE-2026-18562
HP
HUSKY – Products Filter for WooCommerce Professional
realmag777
6.1
0%
Sep 11HUSKY <= 1.4.3 - Reflected Cross-Site Scripting
CVE-2026-84816
WP
WPCS
RealMag777
7.1
0%
Sep 10WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66436
AP
Active Products Tables for WooCommerce
RealMag777
9.3
0%
Aug 13WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
CVE-2026-18881
TW
TableOn – WordPress Posts Table Filterable
realmag777
7.5
1%
Aug 5TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter
CVE-2026-57409
AP
Active Products Tables for WooCommerce
RealMag777
7.1
0%
Jul 13WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57320
BE
BEAR
RealMag777
7.1
0%
Jun 29WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57319
FO
FOX
RealMag777
7.1
0%
Jun 26WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39574
IG
InPost Gallery
RealMag777
9.3
0%
Jun 16WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability
CVE-2026-9241
FC
FOX – Currency Switcher Professional for WooCommerce
realmag777
4.3
0%
May 28FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
CVE-2026-42761
AP
Active Products Tables for WooCommerce
RealMag777
9.3
0%
May 27WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability
CVE-2026-42755
TA
TableOn
RealMag777
9.3
0%
May 27WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability
CVE-2026-42733
WP
WPCS
RealMag777
7.1
0%
May 27WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42727
AP
Active Products Tables for WooCommerce
RealMag777
9.3
0%
May 27WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability
CVE-2026-4094
FC
FOX – Currency Switcher Professional for WooCommerce
realmag777
8.1
0%
May 15FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion
CVE-2026-45213
BE
BEAR
RealMag777
7.6
0%
May 12WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability
CVE-2026-1672
BB
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
realmag777
6.5
0%
Apr 8BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification
CVE-2026-1673
BB
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
realmag777
4.3
0%
Apr 8BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion
CVE-2026-39501
FO
FOX
RealMag777
5.3
0%
Apr 8WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability
CVE-2026-39497
FO
FOX
RealMag777
7.6
0%
Apr 8WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability
CVE-2026-3513
TW
TableOn – WordPress Posts Table Filterable
realmag777
6.4
0%
Apr 8TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
CVE-2026-32458
WO
WOLF
RealMag777
7.6
0%
Mar 13WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability
CVE-2026-32455
MD
MDTF
RealMag777
6.5
0%
Mar 13WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32450
AP
Active Products Tables for WooCommerce
RealMag777
6.5
0%
Mar 13WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67990
GT
GMap Targeting
RealMag777
7.1
0%
Feb 20WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69316
TA
TableOn
RealMag777
7.1
0%
Jan 22WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-13110
HP
HUSKY – Products Filter Professional for WooCommerce
realmag777
4.3
0%
Dec 18HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
CVE-2025-13109
HP
HUSKY – Products Filter Professional for WooCommerce
realmag777
4.3
0%
Dec 3HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'
CVE-2024-12030
MM
MDTF – Meta Data and Taxonomies Filter
realmag777
6.5
1%
Jan 8MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection