Skip to contentPluginus vulnerabilities
Newest
- pluginus woot, realmag777 active products tables for woocommerce. use constructor to create tables +1 moreActive Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing AuthorizationCVE-2024-07974.3 Medium
- pluginus wordpress currency switcher, realmag777 wpcs – wordpress currency switcher professional +1 moreWordPress WPCS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-515065.5 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)CVE-2024-221597.1 High
- realmag777 fox, pluginus fox - currency switcher professional for woocommerce +1 moreWooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File InclusionCVE-2021-245668.8 High
- realmag777 fox – currency switcher professional for woocommerce, pluginus fox - currency switcher professional for woocommerce +1 moreFOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2023-65565.4 Medium
- realmag777 active products tables for woocommerce. professional products tables for woocommerce store, pluginus woot +1 moreWordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object InjectionCVE-2023-5150510.0 Critical
- realmag777 husky – products filter for woocommerce professional, pluginus husky - products filter professional for woocommerce +1 moreWordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL InjectionCVE-2023-400109.3 Critical
- realmag777 fox – currency switcher professional for woocommerce, pluginus fox - currency switcher professional for woocommerce +1 moreWordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-498345.4 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-461524.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationCVE-2023-49414.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product DeletionCVE-2023-49265.4 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Missing Authorization to Product DeletionCVE-2023-49245.4 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product DeletionCVE-2023-49235.4 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile CreationCVE-2023-49354.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2023-49204.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product ManipulationCVE-2023-49374.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product ManipulationCVE-2023-49404.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationCVE-2023-49434.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product ManipulationCVE-2023-49424.3 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationCVE-2023-49384.3 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-449905.9 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerabilityCVE-2023-312187.1 High
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and manager professional +1 moreWordPress WOLF Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-340284.3 Medium
- pluginus wordpress currency switcher professional, realmag777 wpcs – wordpress currency switcher professional +1 moreWPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Custom Drop-Down Currency Switcher CreationCVE-2023-25554.3 Medium
- pluginus wordpress currency switcher professional, realmag777 wpcs – wordpress currency switcher professional +1 moreWPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Arbitrary Custom Drop-Down Currency Switcher EditingCVE-2023-25574.3 Medium
- pluginus wordpress currency switcher professional, realmag777 wpcs – wordpress currency switcher professional +1 moreWPCS – WordPress Currency Switcher Professional <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-25586.4 Medium
- pluginus wordpress currency switcher, realmag777 wpcs – wordpress currency switcher professional +1 moreWPCS – WordPress Currency Switcher Professional <= 1.1.9 - Missing Authorization to Arbitrary Custom Drop-Down Currency Switcher DeletionCVE-2023-25564.3 Medium
- realmag777 bear, pluginus bear - woocommerce bulk editor and products manager professional +1 moreWordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-333145.4 Medium
- pluginus inpost galleryThe InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site...CVE-2023-286665.4 Medium
- pluginus wordpress meta data and taxonomies filterThe Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a...CVE-2023-286645.4 Medium
- realmag777 husky, pluginus husky - products filter professional for woocommerce +1 moreWOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object InjectionCVE-2022-44897.2 High
- unknown woocs, pluginus fox - currency switcher professional for woocommerce +1 moreWOOCS < 1.3.9.4 - Contributor+ Stored XSSCVE-2022-44315.4 Medium
- pluginus inpost galleryInPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCECVE-2022-4063Public exploitEPSS 10.2%9.8 Critical
- realmag777 active products tables for woocommerce. professional products tables for woocommerce store, pluginus woot +1 moreActive Products Tables for WooCommerce < 1.0.5 - Reflected Cross-Site-ScriptingCVE-2022-19166.1 Medium
- pluginus woocs, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWOOCS < 1.3.7.5 - Reflected Cross-Site ScriptingCVE-2022-02346.1 Medium
- pluginus woocommerce products filter, unknown woof – products filter for woocommerce +1 moreWOOF - Products Filter for WooCommerce < 1.2.6.3 - Reflected Cross-Site ScriptingCVE-2021-250856.1 Medium
- pluginus woocommerce currency switcher, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWOOCS < 1.3.7.3 - Reflected Cross-Site ScriptingCVE-2021-250436.1 Medium
- realmag777 wordpress meta data filter & taxonomies filter, pluginus wordpress meta data and taxonomies filter +1 moreCross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter...CVE-2021-207818.8 High