Login Request a demo
WP
Vendor
Wpfactory
21 products with CVEs on record
38
CVEs
0
On KEV
2
New 30D
Products
PF
Product Filter by WBW
WPFactory
9.3
1 CVEs0 on KEV1 new
CO
Cost of Goods for WooCommerce
WPFactory
7.2
2 CVEs0 on KEV1 new
EF
Ean For Woocommerce
Wpfactory
7.2
4 CVEs0 on KEV0 new
WF
Wishlist for WooCommerce
WPFactory
7.1
4 CVEs0 on KEV0 new
EV
Eu/uk Vat Manager For Woocommerce
Wpfactory
6.1
3 CVEs0 on KEV0 new
PO
Products, Order & Customers Export For Woocommerce
Wpfactory
9.8
3 CVEs0 on KEV0 new
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
9.3
2 CVEs0 on KEV0 new
BB
Back Button Widget
Wpfactory
5.4
2 CVEs0 on KEV0 new
CE
Customer Email Verification For Woocommerce
Wpfactory
7.5
2 CVEs0 on KEV0 new
HS
Helpdesk Support Ticket System for WooCommerce
WPFactory
7.5
2 CVEs0 on KEV0 new
MP
Maximum Products per User for WooCommerce
WPFactory
6.5
2 CVEs0 on KEV0 new
WH
Wpfactory Helper
Wpfactory
6.1
2 CVEs0 on KEV0 new
AD
Adverts
WPFactory
6.5
1 CVEs0 on KEV0 new
CA
Change Add TO Cart Button Text For Woocommerce
Wpfactory
5.4
1 CVEs0 on KEV0 new
CC
Custom Css, JS & Php
Wpfactory
4.3
1 CVEs0 on KEV0 new
DP
Download Plugins And Themes From Dashboard
Wpfactory
6.1
1 CVEs0 on KEV0 new
FR
File Renaming ON Upload
Wpfactory
4.8
1 CVEs0 on KEV0 new
FS
Free Shipping Bar
Wpfactory
5.4
1 CVEs0 on KEV0 new
FS
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
WPFactory
6.5
1 CVEs0 on KEV0 new
MM
Min Max Step Quantity Limits Manager for WooCommerce
WPFactory
7.1
1 CVEs0 on KEV0 new
QD
Quantity Dynamic Pricing & Bulk Discounts For Woocommerce
Wpfactory
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112866
New
PF
Product Filter by WBW
WPFactory
9.3
0%
Oct 24WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
CVE-2026-93771
CO
Cost of Goods for WooCommerce
WPFactory
7.2
0%
Sep 30WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability
CVE-2026-39437
MM
Min Max Step Quantity Limits Manager for WooCommerce
WPFactory
7.1
0%
Jun 16WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24993
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
9.3
0%
Mar 25WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability
CVE-2026-23977
HS
Helpdesk Support Ticket System for WooCommerce
WPFactory
7.5
0%
Mar 25WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-24992
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
5.3
0%
Feb 3WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability
CVE-2025-69334
WF
Wishlist for WooCommerce
WPFactory
6.5
0%
Jan 6WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62096
MP
Maximum Products per User for WooCommerce
WPFactory
6.5
0%
Dec 31WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68528
FS
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
WPFactory
6.5
0%
Dec 24WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57911
AD
Adverts
WPFactory
6.5
0%
Sep 22WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57972
HS
Helpdesk Support Ticket System for WooCommerce
WPFactory
4.3
0%
Sep 22WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-48254
CA
Change Add TO Cart Button Text For Woocommerce
Wpfactory
5.4
0%
May 19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Change Add to Cart Button Text for WooCommerce…
CVE-2025-48253
FS
Free Shipping Bar
Wpfactory
5.4
0%
May 19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce…
CVE-2025-48252
BB
Back Button Widget
Wpfactory
5.4
0%
May 19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget back-button-widget allows Stored XSS.This issue…
CVE-2024-13774
WF
Wishlist For Woocommerce
Wpfactory
6.5
0%
Mar 8The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.7
CVE-2024-13525
CE
Customer Email Verification For Woocommerce
Wpfactory
6.5
0%
Feb 15The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4 via Shortcode
CVE-2024-13528
CE
Customer Email Verification For Woocommerce
Wpfactory
7.5
0%
Feb 12The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5
CVE-2024-56228
WF
Wishlist for WooCommerce
WPFactory
7.1
0%
Dec 31WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-10519
WF
Wishlist For Woocommerce
Wpfactory
6.1
1%
Nov 23The Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wtab' parameter in versions 3.0.8 to…
CVE-2024-44061
EV
Eu/uk Vat Manager For Woocommerce
Wpfactory
6.1
0%
Oct 20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue…
CVE-2024-9377
PO
Products, Order & Customers Export For Woocommerce
Wpfactory
6.1
0%
Oct 10The Products, Order & Customers Export for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg…
CVE-2024-9205
MP
Maximum Products Per User For Woocommerce
Wpfactory
6.1
0%
Oct 10The Maximum Products per User for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on…
CVE-2024-9384
QD
Quantity Dynamic Pricing & Bulk Discounts For Woocommerce
Wpfactory
6.1
0%
Oct 4The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without…
CVE-2024-9189
EV
Eu/uk Vat Manager For Woocommerce
Wpfactory
5.3
0%
Sep 28The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2024-8788
EV
Eu/uk Vat Manager For Woocommerce
Wpfactory
6.1
0%
Sep 28The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL…
CVE-2024-8656
WH
Wpfactory Helper
Wpfactory
6.1
0%
Sep 13The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions…
CVE-2024-31276
PO
Products, Order & Customers Export For Woocommerce
Wpfactory
9.8
0%
Jun 9Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a…
CVE-2024-34370
EF
Ean For Woocommerce
Wpfactory
7.2
1%
May 17Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9
CVE-2023-6897
EF
Ean For Woocommerce
Wpfactory
4.3
0%
Apr 18The EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.9.2 via the the 'alg_wc_ean_product_meta'…
CVE-2023-6892
EF
Ean For Woocommerce
Wpfactory
5.4
0%
Apr 18The EAN for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_ean_product_meta' shortcode in all versions up to, and…
CVE-2024-0821
CO
Cost OF Goods For Woocommerce
Wpfactory
6.1
0%
Feb 29The Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'section' parameter in all…
CVE-2023-51399
BB
Back Button Widget
Wpfactory
5.4
0%
Dec 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button…
CVE-2023-47547
PO
Products, Order & Customers Export For Woocommerce
Wpfactory
6.1
0%
Nov 14Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommerce plugin <= 2.0.7 versions
CVE-2021-4418
CC
Custom Css, JS & Php
Wpfactory
4.3
0%
Oct 20The Custom CSS, JS & PHP plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.7
CVE-2023-36689
WH
Wpfactory Helper
Wpfactory
6.1
0%
Aug 5Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory WPFactory Helper plugin <= 1.5.2 versions
CVE-2023-2684
FR
File Renaming ON Upload
Wpfactory
4.8
0%
Jun 19The File Renaming on Upload WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2023-0062
EF
Ean For Woocommerce
Wpfactory
5.4
1%
Feb 6The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode…
CVE-2019-17239
DP
Download Plugins And Themes From Dashboard
Wpfactory
6.1
1%
Oct 7includes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard plugin through 1.5.0 for WordPress has multiple unauthenticated stored XSS issues