Pluginus vulnerabilities

Products

• Bear - Woocommerce Bulk Editor And Products Manager Professional 18
• Husky - Products Filter Professional For Woocommerce 14
• Wordpress Meta Data And Taxonomies Filter 12
• Wolf - Wordpress Posts Bulk Editor And Products Manager Professional 10
• Woot 8
• Fox - Currency Switcher Professional For Woocommerce 7
• Wordpress Currency Switcher 4
• Husky – Products Filter For Woocommerce (formerly Woof) 3
• Inpost Gallery 3
• Wordpress Currency Switcher Professional 3
• Meta Data And Taxonomies Filter 2
• Woocommerce Products Filter 2

Newest

• realmag777 tableon – wordpress posts table filterable, pluginus tableon - wordpress posts table filterable +1 more TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode CVE-2025-5143 6.4 MediumJune 21, 2025
• pluginus taxonomy chain menu Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode CVE-2025-3748 6.4 MediumMay 2, 2025
• realmag777 husky – products filter professional for woocommerce, pluginus husky - products filter professional for woocommerce +1 more HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion CVE-2025-1661 Public exploit EPSS 56.4% 9.8 CriticalMarch 11, 2025
• pluginus active products tables for woocommerce, realmag777 active products tables for woocommerce. use constructor to create tables +1 more Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting CVE-2025-0864 6.1 MediumFebruary 18, 2025
• realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 more WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-26775 5.9 MediumFebruary 17, 2025
• realmag777 wolf, pluginus wolf - wordpress posts bulk editor and products manager professional +1 more WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability CVE-2025-24605 7.5 HighFebruary 3, 2025
• pluginus meta data and taxonomies filter, realmag777 mdtf – meta data and taxonomies filter +1 more MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13340 6.4 MediumJanuary 23, 2025
• realmag777 mdtf – meta data and taxonomies filter, pluginus wordpress meta data and taxonomies filter +1 more MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection CVE-2024-12030 6.5 MediumJanuary 8, 2025
• realmag777 husky, pluginus husky - products filter professional for woocommerce +1 more WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability CVE-2023-40334 4.3 MediumDecember 13, 2024
• pluginus inpost gallery InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template CVE-2024-11002 6.3 MediumNovember 26, 2024
• realmag777 husky – products filter professional for woocommerce, pluginus woocommerce products filter +1 more HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter CVE-2024-11400 6.1 MediumNovember 19, 2024
• realmag777 wolf, pluginus wolf - wordpress posts bulk editor and products manager professional +1 more WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability CVE-2024-52396 4.9 MediumNovember 14, 2024
• pluginus woot, realmag777 active products tables for woocommerce. use constructor to create tables +1 more Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode CVE-2024-10168 6.4 MediumNovember 6, 2024
• pluginus meta data and taxonomies filter, realmag777 mdtf +1 more WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2024-50451 6.5 MediumOctober 28, 2024
• realmag777 mdtf, pluginus wordpress meta data and taxonomies filter +1 more WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability CVE-2024-50450 Public exploit 7.3 HighOctober 28, 2024
• realmag777 husky, husky – products filter professional for woocommerce, pluginus husky - products filter professional for woocommerce +2 more HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe CVE-2024-7491 5.3 MediumSeptember 25, 2024
• realmag777 mdtf – meta data and taxonomies filter, pluginus wordpress meta data and taxonomies filter +1 more MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-8623 7.3 HighSeptember 24, 2024
• realmag777 mdtf – meta data and taxonomies filter, pluginus wordpress meta data and taxonomies filter +1 more MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection CVE-2024-8624 9.9 CriticalSeptember 24, 2024
• realmag777 fox – currency switcher professional for woocommerce, pluginus fox - currency switcher professional for woocommerce, realmag777 fox-currency switcher professional +2 more FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-8271 7.3 HighSeptember 14, 2024
• realmag777 husky, pluginus husky - products filter professional for woocommerce +1 more WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability CVE-2024-43121 9.1 CriticalAugust 13, 2024
• pluginus husky - products filter professional for woocommerce, realmag777 husky – products filter professional for woocommerce +1 more HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection CVE-2024-6457 EPSS 19.7% 9.8 CriticalJuly 16, 2024
• pluginus wordpress currency switcher, realmag777 wpcs +1 more WordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability CVE-2024-38700 6.5 MediumJuly 12, 2024
• pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 more WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability CVE-2024-32818 4.3 MediumJune 9, 2024
• realmag777 active products tables for woocommerce, pluginus woot +1 more WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-35730 7.1 HighJune 8, 2024
• realmag777 husky – products filter professional for woocommerce, pluginus husky - products filter professional for woocommerce +1 more HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-5039 6.4 MediumMay 29, 2024
• pluginus husky – products filter for woocommerce (formerly woof), husky - products filter professional for woocommerce +1 more WordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability CVE-2024-32680 8.8 HighMay 17, 2024
• pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 more WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability CVE-2024-34434 6.5 MediumMay 17, 2024
• realmag777 wolf, pluginus wolf - wordpress posts bulk editor and products manager professional +1 more WordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-34558 5.9 MediumMay 8, 2024
• realmag777 fox – currency switcher professional for woocommerce, pluginus fox - currency switcher professional for woocommerce +1 more FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-3734 6.5 MediumMay 2, 2024
• realmag777 active products tables for woocommerce, pluginus woot +1 more WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability CVE-2024-32691 5.3 MediumApril 22, 2024
• realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net, wolf – wordpress posts bulk editor and manager professional, pluginus bear - woocommerce bulk editor and products manager professional +1 more +3 more Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins CVE-2024-31430 4.3 MediumApril 10, 2024
• pluginus husky – products filter for woocommerce (formerly woof), husky - products filter professional for woocommerce +1 more WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30462 4.3 MediumMarch 29, 2024
• realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 more WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability CVE-2024-30463 4.3 MediumMarch 29, 2024
• pluginus wordpress currency switcher, realmag777 wpcs +1 more WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30456 4.3 MediumMarch 29, 2024
• pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 more WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30457 4.3 MediumMarch 29, 2024
• realmag777 woocs – woocommerce currency switcher, pluginus fox - currency switcher professional for woocommerce +1 more WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-30458 4.3 MediumMarch 29, 2024
• realmag777 husky – products filter professional for woocommerce, pluginus husky - products filter professional for woocommerce +1 more HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion CVE-2024-3061 7.2 HighMarch 29, 2024
• realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 more WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-30200 7.1 HighMarch 28, 2024
• pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 more WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-29763 7.1 HighMarch 27, 2024
• pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 more WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-29932 6.5 MediumMarch 27, 2024
• pluginus wordpress meta data and taxonomies filter, realmag777 wordpress meta data and taxonomies filter (mdtf) +1 more WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-29906 5.9 MediumMarch 27, 2024
• realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 more WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability CVE-2024-24835 4.3 MediumMarch 23, 2024
• pluginus husky – products filter for woocommerce (formerly woof), husky - products filter professional for woocommerce +1 more WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-50861 4.3 MediumMarch 15, 2024
• pluginus husky - products filter professional for woocommerce, realmag777 husky – products filter professional for woocommerce +1 more HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection CVE-2024-1795 8.8 HighMarch 15, 2024
• pluginus husky - products filter professional for woocommerce, realmag777 husky – products filter professional for woocommerce +1 more HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1796 6.4 MediumMarch 15, 2024
• realmag777 active products tables for woocommerce. professional products tables for woocommerce store, pluginus woot +1 more WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51480 6.5 MediumFebruary 10, 2024
• realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net, pluginus bear - woocommerce bulk editor and products manager professional +1 more WordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24834 5.9 MediumFebruary 8, 2024
• realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 more WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgery CVE-2024-0790 5.4 MediumFebruary 5, 2024
• pluginus woot, realmag777 active products tables for woocommerce. use constructor to create tables +1 more Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery CVE-2024-0796 4.3 MediumFebruary 5, 2024
• realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 more WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization CVE-2024-0791 4.3 MediumFebruary 5, 2024
• Show olderLoading…