Realmag777 vulnerabilities

Products

• Bear – Bulk Editor And Products Manager Professional For Woocommerce By Pluginus.net 15
• Bear 12
• Husky – Products Filter Professional For Woocommerce 11
• Mdtf 11
• Active Products Tables For Woocommerce 10
• Husky 10
• Wolf – Wordpress Posts Bulk Editor And Manager Professional 8
• Fox – Currency Switcher Professional For Woocommerce 7
• Tableon 7
• Active Products Tables For Woocommerce. Use Constructor To Create Tables 6
• Fox 6
• Wolf 6
• Wordpress Meta Data And Taxonomies Filter (mdtf) 6
• Wpcs – Wordpress Currency Switcher Professional 6
• Inpost Gallery 5
• Mdtf – Meta Data And Taxonomies Filter 5
• Husky – Products Filter For Woocommerce Professional 4
• Wpcs 4
• Active Products Tables For Woocommerce. Professional Products Tables For Woocommerce Store 3
• Tableon – Wordpress Posts Table Filterable 3
• Active Woot Products Tables For Woocommerce. 100% Free 2
• Fox-currency Switcher Professional 2
• Gmap Targeting 2
• Husky – Products Filter For Woocommerce (formerly Woof) 2

Newest

• pluginus.net fox WordPress FOX plugin <= 1.5.6 - Broken Access Control vulnerability CVE-2026-123461 5.3 MediumNovember 7, 2026
• pluginus.net active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 2.1.6 - Content Injection vulnerability CVE-2026-123183 5.3 MediumNovember 7, 2026
• realmag777 active woot products tables for woocommerce. 100% free Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'help_title' Shortcode Attribute CVE-2026-120579 6.4 MediumNovember 7, 2026
• realmag777 active woot products tables for woocommerce. 100% free Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters CVE-2026-120560 6.5 MediumNovember 7, 2026
• realmag777 mdtf – meta data and taxonomies filter MDTF <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting via 'vars' Parameter CVE-2026-110776 7.2 HighNovember 6, 2026
• realmag777 husky WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability CVE-2026-116401 7.5 HighOctober 30, 2026
• realmag777 husky WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability CVE-2026-115947 6.5 MediumOctober 30, 2026
• pluginus.net tableon WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-115611 7.1 HighOctober 29, 2026
• realmag777 husky – products filter for woocommerce professional HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script CVE-2026-107646 5.3 MediumOctober 16, 2026
• pluginus.net mdtf WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-108175 6.5 MediumOctober 15, 2026
• pluginus.net mdtf WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability CVE-2026-108151 5.3 MediumOctober 14, 2026
• pluginus.net wolf WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability CVE-2026-108179 7.6 HighOctober 13, 2026
• pluginus.net active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability CVE-2026-108489 5.3 MediumOctober 13, 2026
• pluginus.net fox WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability CVE-2026-108174 5.3 MediumOctober 13, 2026
• pluginus.net husky WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-95608 7.1 HighOctober 9, 2026
• realmag777 bear WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability CVE-2026-95526 7.3 HighOctober 6, 2026
• realmag777 husky – products filter for woocommerce professional HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX CVE-2026-92969 8.1 HighSeptember 22, 2026
• realmag777 bear BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR CVE-2026-84025 2.2 LowSeptember 12, 2026
• realmag777 bear BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF CVE-2026-84024 4.3 MediumSeptember 12, 2026
• realmag777 bear BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF CVE-2026-84023 6.5 MediumSeptember 12, 2026
• realmag777 husky – products filter for woocommerce professional HUSKY <= 1.4.3 - Reflected Cross-Site Scripting CVE-2026-18562 6.1 MediumSeptember 11, 2026
• realmag777 wpcs WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-84816 7.1 HighSeptember 10, 2026
• realmag777 active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability CVE-2026-66436 9.3 CriticalAugust 13, 2026
• realmag777 tableon – wordpress posts table filterable TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter CVE-2026-18881 7.5 HighAugust 5, 2026
• realmag777 husky HUSKY - Products Filter Professional for WooCommerce < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view CVE-2026-15244 7.2 HighAugust 1, 2026
• realmag777 wolf WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF CVE-2026-14234 7.1 HighJuly 29, 2026
• realmag777 active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-57409 7.1 HighJuly 13, 2026
• realmag777 bear WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-57320 7.1 HighJune 29, 2026
• realmag777 fox WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-57319 7.1 HighJune 26, 2026
• pluginus.net mdtf WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability CVE-2026-54845 8.1 HighJune 25, 2026
• pluginus.net mdtf WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability CVE-2026-54843 9.3 CriticalJune 25, 2026
• realmag777 inpost gallery WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability CVE-2026-39574 9.3 CriticalJune 16, 2026
• realmag777 fox – currency switcher professional for woocommerce FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter CVE-2026-9241 4.3 MediumMay 28, 2026
• realmag777 active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability CVE-2026-42761 9.3 CriticalMay 27, 2026
• realmag777 tableon WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability CVE-2026-42755 9.3 CriticalMay 27, 2026
• realmag777 wpcs WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-42733 7.1 HighMay 27, 2026
• realmag777 active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability CVE-2026-42727 9.3 CriticalMay 27, 2026
• realmag777 fox – currency switcher professional for woocommerce FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion CVE-2026-4094 8.1 HighMay 15, 2026
• realmag777 bear WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability CVE-2026-45213 7.6 HighMay 12, 2026
• pluginus.net bear WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-27415 4.3 MediumMay 7, 2026
• realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification CVE-2026-1672 6.5 MediumApril 8, 2026
• realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion CVE-2026-1673 4.3 MediumApril 8, 2026
• realmag777 fox WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability CVE-2026-39501 5.3 MediumApril 8, 2026
• realmag777 fox WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability CVE-2026-39497 7.6 HighApril 8, 2026
• realmag777 tableon – wordpress posts table filterable TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute CVE-2026-3513 6.4 MediumApril 8, 2026
• realmag777 wolf WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability CVE-2026-32458 7.6 HighMarch 13, 2026
• realmag777 mdtf WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-32455 6.5 MediumMarch 13, 2026
• realmag777 active products tables for woocommerce WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-32450 6.5 MediumMarch 13, 2026
• realmag777 gmap targeting WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-67990 7.1 HighFebruary 20, 2026
• realmag777 tableon WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69316 7.1 HighJanuary 22, 2026
• Show olderLoading…