Etoilewebdesign vulnerabilities

Products

• Front End Users 10
• Ultimate Faq 5
• Ultimate Product Catalog 4
• Order Tracking 3
• Ultimate Reviews 3
• Ultimate Product Catalog 2

Newest

• etoilewebdesign ultimate product catalog WordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE CVE-2016-20075 8.7 HighJune 15, 2026
• etoile web design ultimate product catalogue WordPress Plugin Ultimate Product Catalogue 5.8.2 Stored XSS via price CVE-2021-47924 5.1 MediumMay 10, 2026
• etoilewebdesign front end users WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability CVE-2025-47580 5.4 MediumMay 15, 2025
• etoilewebdesign front end users Front End Users <= 3.2.32 - Reflected XSS CVE-2024-13569 7.1 HighApril 22, 2025
• etoilewebdesign front end users Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection CVE-2024-12410 4.9 MediumApril 2, 2025
• etoilewebdesign front end users Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload CVE-2025-2005 Public exploit EPSS 21.8% 9.8 CriticalApril 2, 2025
• etoilewebdesign front end users WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability CVE-2025-26877 6.5 MediumFebruary 25, 2025
• etoilewebdesign front end users Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode CVE-2024-13563 6.4 MediumFebruary 15, 2025
• etoile web design order tracking WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability CVE-2024-43343 4.3 MediumNovember 1, 2024
• etoilewebdesign front end users Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection CVE-2024-7607 8.8 HighAugust 29, 2024
• etoilewebdesign front end users Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-7606 6.4 MediumAugust 29, 2024
• etoile web design front end users WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability CVE-2023-33322 7.1 HighMarch 26, 2024
• etoile web design ultimate reviews WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability CVE-2024-25597 7.1 HighMarch 15, 2024
• etoilewebdesign order tracking, rustaurius order tracking – wordpress status tracking plugin +1 more Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting CVE-2023-4471 6.1 MediumAugust 31, 2023
• etoilewebdesign order tracking, rustaurius order tracking – wordpress status tracking plugin +1 more Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-4500 4.7 MediumAugust 31, 2023
• etoile web design front end users WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-34005 6.5 MediumJuly 17, 2023
• etoilewebdesign ultimate product catalog Ultimate Product Catalog < 5.2.6 - Admin+ Stored XSS CVE-2023-2711 4.8 MediumJune 27, 2023
• etoilewebdesign ultimate reviews Ultimate Reviews < 2.1.33 - PHP Object Injection CVE-2020-36726 9.8 CriticalJune 7, 2023
• etoilewebdesign ultimate product catalog, unknown ultimate product catalog – wordpress catalog plugin +1 more Ultimate Product Catalog < 5.0.26 - Subscriber+ Arbitrary Product Creation & Settings Update CVE-2021-24993 6.5 MediumFebruary 7, 2022
• etoilewebdesign ultimate reviews WordPress Ultimate Reviews plugin <= 3.0.15 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-23979 4.8 MediumJanuary 28, 2022
• etoilewebdesign ultimate faq, unknown ultimate faq – wordpress faq and accordion plugin +1 more Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ Creation CVE-2021-24968 5.7 MediumJanuary 24, 2022
• etoilewebdesign ultimate appointment booking \& scheduling Etoile Web Design Ultimate Appointment Booking & Scheduling WordPress Plugin v1.1.9 and lower... CVE-2020-24313 6.1 MediumAugust 26, 2020
• etoilewebdesign ultimate faq The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes... CVE-2020-7107 6.1 MediumJanuary 16, 2020
• etoilewebdesign ultimate faq Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows... CVE-2019-17232 7.5 HighOctober 7, 2019
• etoilewebdesign ultimate faq Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows... CVE-2019-17233 6.1 MediumOctober 7, 2019
• etoilewebdesign ultimate faq The ultimate-faqs plugin before 1.8.22 for WordPress has XSS. CVE-2019-15643 6.1 MediumAugust 27, 2019
• etoilewebdesign ultimate product catalog The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product... CVE-2017-12200 6.1 MediumAugust 2, 2017
• etoilewebdesign ultimate product catalog The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp... CVE-2017-12199 9.8 CriticalAugust 2, 2017