RE
Vendor
RealMag777
31
CVEs
0
On KEV
2
New 30D
Products
BE7.6
BEAR
RealMag777
3 CVEs0 on KEV1 new
HP8.1
HUSKY – Products Filter for WooCommerce Professional
realmag777
3 CVEs0 on KEV1 new
AP9.3
Active Products Tables for WooCommerce
RealMag777
5 CVEs0 on KEV0 new
FO7.6
FOX
RealMag777
3 CVEs0 on KEV0 new
BB6.5
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
realmag777
2 CVEs0 on KEV0 new
FC8.1
FOX – Currency Switcher Professional for WooCommerce
realmag777
2 CVEs0 on KEV0 new
HP4.3
HUSKY – Products Filter Professional for WooCommerce
realmag777
2 CVEs0 on KEV0 new
TA9.3
TableOn
RealMag777
2 CVEs0 on KEV0 new
TW7.5
TableOn – WordPress Posts Table Filterable
realmag777
2 CVEs0 on KEV0 new
WP7.1
WPCS
RealMag777
2 CVEs0 on KEV0 new
GT7.1
GMap Targeting
RealMag777
1 CVEs0 on KEV0 new
IG9.3
InPost Gallery
RealMag777
1 CVEs0 on KEV0 new
MD6.5
MDTF
RealMag777
1 CVEs0 on KEV0 new
MM6.5
MDTF – Meta Data and Taxonomies Filter
realmag777
1 CVEs0 on KEV0 new
WO7.6
WOLF
RealMag777
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107646 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 5.3 | Oct 16 | HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script |
| CVE-2026-95526 | BE BEAR RealMag777 | 7.3 | Oct 6 | WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability |
| CVE-2026-92969 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 8.1 | Sep 22 | HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX |
| CVE-2026-18562 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 6.1 | Sep 11 | HUSKY <= 1.4.3 - Reflected Cross-Site Scripting |
| CVE-2026-84816 | WP WPCS RealMag777 | 7.1 | Sep 10 | WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66436 | AP Active Products Tables for WooCommerce RealMag777 | 9.3 | Aug 13 | WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability |
| CVE-2026-18881 | TW TableOn – WordPress Posts Table Filterable realmag777 | 7.5 | Aug 5 | TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter |
| CVE-2026-57409 | AP Active Products Tables for WooCommerce RealMag777 | 7.1 | Jul 13 | WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57320 | BE BEAR RealMag777 | 7.1 | Jun 29 | WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57319 | FO FOX RealMag777 | 7.1 | Jun 26 | WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39574 | IG InPost Gallery RealMag777 | 9.3 | Jun 16 | WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability |
| CVE-2026-9241 | FC FOX – Currency Switcher Professional for WooCommerce realmag777 | 4.3 | May 28 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter |
| CVE-2026-42761 | AP Active Products Tables for WooCommerce RealMag777 | 9.3 | May 27 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability |
| CVE-2026-42755 | TA TableOn RealMag777 | 9.3 | May 27 | WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability |
| CVE-2026-42733 | WP WPCS RealMag777 | 7.1 | May 27 | WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42727 | AP Active Products Tables for WooCommerce RealMag777 | 9.3 | May 27 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability |
| CVE-2026-4094 | FC FOX – Currency Switcher Professional for WooCommerce realmag777 | 8.1 | May 15 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion |
| CVE-2026-45213 | BE BEAR RealMag777 | 7.6 | May 12 | WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability |
| CVE-2026-1672 | BB BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net realmag777 | 6.5 | Apr 8 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification |
| CVE-2026-1673 | BB BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net realmag777 | 4.3 | Apr 8 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion |
| CVE-2026-39501 | FO FOX RealMag777 | 5.3 | Apr 8 | WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability |
| CVE-2026-39497 | FO FOX RealMag777 | 7.6 | Apr 8 | WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability |
| CVE-2026-3513 | TW TableOn – WordPress Posts Table Filterable realmag777 | 6.4 | Apr 8 | TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute |
| CVE-2026-32458 | WO WOLF RealMag777 | 7.6 | Mar 13 | WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability |
| CVE-2026-32455 | MD MDTF RealMag777 | 6.5 | Mar 13 | WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-32450 | AP Active Products Tables for WooCommerce RealMag777 | 6.5 | Mar 13 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67990 | GT GMap Targeting RealMag777 | 7.1 | Feb 20 | WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69316 | TA TableOn RealMag777 | 7.1 | Jan 22 | WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-13110 | HP HUSKY – Products Filter Professional for WooCommerce realmag777 | 4.3 | Dec 18 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' |
| CVE-2025-13109 | HP HUSKY – Products Filter Professional for WooCommerce realmag777 | 4.3 | Dec 3 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' |
| CVE-2024-12030 | MM MDTF – Meta Data and Taxonomies Filter realmag777 | 6.5 | Jan 8 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection |
