WP
Vendor
wpcodefactory
24
CVEs
0
On KEV
2
New 30D
Products
CE8.1
Customer Email Verification for WooCommerce
wpcodefactory
4 CVEs0 on KEV1 new
HS4.3
Helpdesk Support Ticket System for WooCommerce
wpcodefactory
1 CVEs0 on KEV1 new
DP6.1
Download Plugins and Themes in ZIP from Dashboard
wpcodefactory
3 CVEs0 on KEV0 new
CO6.4
Cost of Goods: Product Cost & Profit Calculator for WooCommerce
wpcodefactory
2 CVEs0 on KEV0 new
EB5.4
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
wpcodefactory
2 CVEs0 on KEV0 new
EV6.1
EU/UK VAT Validation Manager for WooCommerce
wpcodefactory
2 CVEs0 on KEV0 new
AC6.1
Additional Custom Order Status for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
CC6.1
Custom CSS, JS & PHP
wpcodefactory
1 CVEs0 on KEV0 new
EP6.1
Export Products, Orders & Customers for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
MP6.1
Maximum Products per User for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
OM4.4
Order Minimum/Maximum Amount Limits for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
PI6.1
PDF Invoices & Packing Slips Generator for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
PB6.1
Price by Quantity & Bulk Quantity Discounts for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
SH6.4
Stock History & Reports Manager for WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
WP4.4
WholeSale Products Dynamic Pricing Management WooCommerce
wpcodefactory
1 CVEs0 on KEV0 new
WF6.5
Wishlist for WooCommerce: Multi Wishlists Per Customer
wpcodefactory
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104745 | CE Customer Email Verification for WooCommerce wpcodefactory | 8.1 | Oct 16 | Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter |
| CVE-2026-11399 | HS Helpdesk Support Ticket System for WooCommerce wpcodefactory | 4.3 | Oct 3 | Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter |
| CVE-2026-6962 | CO Cost of Goods: Product Cost & Profit Calculator for WooCommerce wpcodefactory | 6.4 | May 13 | Cost of Goods: Product Cost & Profit Calculator for WooCommerce <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2026-4479 | WP WholeSale Products Dynamic Pricing Management WooCommerce wpcodefactory | 4.4 | Apr 14 | WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings |
| CVE-2026-1381 | OM Order Minimum/Maximum Amount Limits for WooCommerce wpcodefactory | 4.4 | Jan 28 | Order Minimum/Maximum Amount Limits for WooCommerce <= 4.6.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via Hide Add to Cart Content Fields |
| CVE-2025-14399 | DP Download Plugins and Themes in ZIP from Dashboard wpcodefactory | 4.3 | Dec 17 | Download Plugins and Themes from Dashboard <= 1.9.6 - Cross-Site Request Forgery to Bulk Plugin/Theme Archival |
| CVE-2025-10167 | SH Stock History & Reports Manager for WooCommerce wpcodefactory | 6.4 | Oct 11 | Stock History & Reports Manager for WooCommerce <= 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-13774 | WF Wishlist for WooCommerce: Multi Wishlists Per Customer wpcodefactory | 6.5 | Mar 8 | Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name |
| CVE-2024-13525 | CE Customer Email Verification for WooCommerce wpcodefactory | 6.5 | Feb 15 | Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure |
| CVE-2024-13528 | CE Customer Email Verification for WooCommerce wpcodefactory | 7.5 | Feb 12 | Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode |
| CVE-2024-11814 | AC Additional Custom Order Status for WooCommerce wpcodefactory | 6.1 | Dec 4 | Additional Custom Order Status for WooCommerce <= 1.6.0 - Reflected Cross-Site Scripting |
| CVE-2024-11330 | CC Custom CSS, JS & PHP wpcodefactory | 6.1 | Nov 23 | Custom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site Scripting |
| CVE-2024-11361 | PI PDF Invoices & Packing Slips Generator for WooCommerce wpcodefactory | 6.1 | Nov 23 | PDF Invoices & Packing Slips Generator for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting |
| CVE-2024-9232 | DP Download Plugins and Themes in ZIP from Dashboard wpcodefactory | 6.1 | Oct 11 | Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 - Reflected Cross-Site Scripting |
| CVE-2024-9377 | EP Export Products, Orders & Customers for WooCommerce wpcodefactory | 6.1 | Oct 10 | Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting |
| CVE-2024-9205 | MP Maximum Products per User for WooCommerce wpcodefactory | 6.1 | Oct 10 | Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting |
| CVE-2024-9384 | PB Price by Quantity & Bulk Quantity Discounts for WooCommerce wpcodefactory | 6.1 | Oct 4 | Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting |
| CVE-2024-9189 | EV EU/UK VAT Validation Manager for WooCommerce wpcodefactory | 5.3 | Sep 28 | EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization |
| CVE-2024-8788 | EV EU/UK VAT Validation Manager for WooCommerce wpcodefactory | 6.1 | Sep 28 | EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting |
| CVE-2024-7501 | DP Download Plugins and Themes in ZIP from Dashboard wpcodefactory | 4.2 | Aug 16 | Download Plugins and Themes from Dashboard <= 1.8.7 - Cross-Site Request Forgery |
| CVE-2024-4185 | CE Customer Email Verification for WooCommerce wpcodefactory | 8.1 | Apr 30 | Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness |
| CVE-2023-6892 | EB EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory wpcodefactory | 5.4 | Apr 18 | EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode |
| CVE-2023-6897 | EB EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory wpcodefactory | 4.3 | Apr 18 | EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode |
| CVE-2024-0821 | CO Cost of Goods: Product Cost & Profit Calculator for WooCommerce wpcodefactory | 6.1 | Feb 20 | Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site Scripting |
