Wpfactory vulnerabilities

Products

• Customer Email Verification For Woocommerce 6
• Wishlist For Woocommerce 6
• Customer Email Verification For Woocommerce 4
• Ean For Woocommerce 4
• Ean For Woocommerce 4
• Advanced Woocommerce Product Sales Reporting 3
• Cost Of Goods For Woocommerce 3
• Eu\/uk Vat Manager For Woocommerce 3
• Helpdesk Support Ticket System For Woocommerce 3
• Products, Order & Customers Export For Woocommerce 3
• Products\, Order \& Customers Export For Woocommerce 3
• Product Xml Feed Manager For Woocommerce 3
• Additional Custom Product Tabs For Woocommerce 2
• Adverts 2
• Back Button Widget 2
• Back Button Widget 2
• Custom Css, Js & Php 2
• Download Plugins And Themes From Dashboard 2
• Free Shipping Bar: Amount Left For Free Shipping For Woocommerce 2
• Maximum Products Per User For Woocommerce 2
• Min Max Step Quantity Limits Manager For Woocommerce 2
• Wishlist For Woocommerce 2
• Helper 2

Newest

• wpfactory customer email verification for woocommerce Customer Email Verification for WooCommerce <= 2.8.2 - Unauthenticated Authentication Bypass via Predictable Email-Verification Token to 'cusomer_email_verify' Parameter CVE-2026-109236 4.8 MediumOctober 28, 2026
• woobewoo product filter by wbw WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability CVE-2026-112866 Public exploit 9.3 CriticalOctober 24, 2026
• wpcodefactory customer email verification for woocommerce Customer Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Privilege Escalation to 'alg_wc_ev_verify_email' Parameter CVE-2026-104745 Public exploit 8.1 HighOctober 16, 2026
• wpcodefactory helpdesk support ticket system for woocommerce Helpdesk Support Ticket System for WooCommerce <= 2.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Ticket Response Deletion via 'id' Parameter CVE-2026-11399 4.3 MediumOctober 3, 2026
• wpfactory cost of goods for woocommerce WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability CVE-2026-93771 7.2 HighSeptember 30, 2026
• unknown product xml feed manager for woocommerce Product XML Feed Manager for WooCommerce < 3.1.1 - Contributor+ Arbitrary Product Deletion via Shortcode CVE-2026-87919 4.9 MediumSeptember 12, 2026
• unknown customer email verification for woocommerce Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass CVE-2026-14182 9.8 CriticalAugust 13, 2026
• wpfactory min max step quantity limits manager for woocommerce WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-39437 7.1 HighJune 16, 2026
• wpfactory advanced woocommerce product sales reporting WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability CVE-2026-24993 9.3 CriticalMarch 25, 2026
• wpfactory helpdesk support ticket system for woocommerce WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability CVE-2026-23977 7.5 HighMarch 25, 2026
• wpfactory advanced woocommerce product sales reporting WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability CVE-2026-24992 5.3 MediumFebruary 3, 2026
• wpfactory wishlist for woocommerce WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-69334 6.5 MediumJanuary 6, 2026
• wpfactory maximum products per user for woocommerce WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-62096 6.5 MediumDecember 31, 2025
• wpfactory free shipping bar: amount left for free shipping for woocommerce WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability CVE-2025-68528 6.5 MediumDecember 24, 2025
• themehunk wishlist for woocommerce Wishlist for WooCommerce <= 1.1.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation CVE-2025-12040 6.5 MediumNovember 25, 2025
• wpfactory adverts WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-57911 6.5 MediumSeptember 22, 2025
• wpfactory helpdesk support ticket system for woocommerce WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability CVE-2025-57972 4.3 MediumSeptember 22, 2025
• wpfactory additional custom product tabs for woocommerce WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58985 6.5 MediumSeptember 9, 2025
• wpfactory product xml feed manager for woocommerce WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability CVE-2025-49887 9.9 CriticalAugust 14, 2025
• wpfactory product xml feed manager for woocommerce WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability CVE-2025-30959 6.5 MediumJuly 16, 2025
• wpfactory wishlist for woocommerce WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability CVE-2025-49319 6.5 MediumJuly 16, 2025
• wpfactory crm erp business solution WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability CVE-2025-49987 5.3 MediumJune 20, 2025
• wpfactory min max step quantity limits manager for woocommerce WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-49510 4.3 MediumJune 10, 2025
• wpfactory change add to cart button text for woocommerce WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48254 6.5 MediumMay 19, 2025
• wpfactory free shipping bar: amount left for free shipping for woocommerce, free shipping bar +1 more WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48253 6.5 MediumMay 19, 2025
• wpfactory back button widget WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48252 6.5 MediumMay 19, 2025
• wpfactory additional custom emails & recipients for woocommerce WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48251 6.5 MediumMay 19, 2025
• wpfactory coupons & add to cart by url links for woocommerce WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48250 6.5 MediumMay 19, 2025
• wpfactory ean for woocommerce WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48249 6.5 MediumMay 19, 2025
• wpfactory sitewide discount for woocommerce: apply discount to all products WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48248 6.5 MediumMay 19, 2025
• wpfactory cost of goods for woocommerce WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48240 6.5 MediumMay 19, 2025
• wpfactory product notes tab & private admin notes for woocommerce WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48239 6.5 MediumMay 19, 2025
• wpfactory wishlist for woocommerce WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-48237 6.5 MediumMay 19, 2025
• wpfactory custom checkout fields for woocommerce WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47504 6.5 MediumMay 7, 2025
• wpfactory msrp (rrp) pricing for woocommerce WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-32552 7.1 HighApril 17, 2025
• wpfactory product excel import export & bulk edit for woocommerce WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-32674 7.1 HighApril 17, 2025
• wpfactory custom css, js & php WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability CVE-2025-39601 Public exploit 9.6 CriticalApril 16, 2025
• wpfactory additional custom product tabs for woocommerce WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-26749 6.5 MediumApril 15, 2025
• wpfactory advanced woocommerce product sales reporting WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability CVE-2025-31553 9.3 CriticalApril 1, 2025
• wpfactory adverts WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerability CVE-2025-31848 5.3 MediumApril 1, 2025
• wpfactory quantity dynamic pricing & bulk discounts for woocommerce WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-31598 6.5 MediumMarch 31, 2025
• wpfactory ean for woocommerce WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability CVE-2025-22673 4.3 MediumMarch 27, 2025
• wpfactory scheduled & automatic order status controller for woocommerce WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability CVE-2025-30781 4.7 MediumMarch 27, 2025
• wpcodefactory wishlist for woocommerce: multi wishlists per customer, wpfactory wishlist for woocommerce +1 more Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name CVE-2024-13774 6.1 MediumMarch 8, 2025
• wpcodefactory customer email verification for woocommerce Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2024-13525 6.5 MediumFebruary 15, 2025
• wpcodefactory customer email verification for woocommerce Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode CVE-2024-13528 7.5 HighFebruary 12, 2025
• webtoffee wishlist for woocommerce WordPress Wishlist for WooCommerce plugin <=2.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-24657 5.9 MediumJanuary 24, 2025
• wpfactory wishlist for woocommerce WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-56228 7.1 HighDecember 31, 2024
• wpfactory wp currency exchange rates WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability CVE-2024-54332 7.1 HighDecember 16, 2024
• wpfactory cost of goods for woocommerce WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability CVE-2023-23868 5.4 MediumDecember 9, 2024
• Show olderLoading…