Skip to contentWpfactory vulnerabilities
Newest
- wpfactory awesome shortcodesWordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-542097.1 High
- karzin wishlist for woocommerce: multi wishlists per customer pro, wpfactory wishlist for woocommerce +1 moreWishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab ParameterCVE-2024-105196.1 Medium
- wpcodefactory custom css, js & phpCustom CSS, JS & PHP <= 2.3.0 - Reflected Cross-Site ScriptingCVE-2024-113306.1 Medium
- omardabbas eu/uk vat manager for woocommerce, wpfactory eu\/uk vat manager for woocommerce +1 moreWordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerabilityCVE-2024-440617.1 High
- wpfactory customer email verification for woocommerce, email verification for woocommerce +1 moreWordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerabilityCVE-2024-493059.3 Critical
- wpcodefactory export products, orders & customers for woocommerce, wpfactory products\, order \& customers export for woocommerce +1 moreProducts, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site ScriptingCVE-2024-93776.1 Medium
- wpcodefactory maximum products per user for woocommerceMaximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site ScriptingCVE-2024-92056.1 Medium
- wpcodefactory price by quantity & bulk quantity discounts for woocommerce, wpfactory quantity dynamic pricing \& bulk discounts for woocommerce +1 moreQuantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site ScriptingCVE-2024-93846.1 Medium
- wpcodefactory eu/uk vat validation manager for woocommerce, wpfactory eu\/uk vat manager, eu\/uk vat manager for woocommerce +2 moreEU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing AuthorizationCVE-2024-91895.3 Medium
- wpcodefactory eu/uk vat validation manager for woocommerce, wpfactory eu\/uk vat manager for woocommerce +1 moreEU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site ScriptingCVE-2024-87886.1 Medium
- algoritmika wpfactory helper, wpfactory helper +1 moreWPFactory Helper <= 1.7.0 - Reflected Cross-Site ScriptingCVE-2024-86566.1 Medium
- omardabbas products, order & customers export for woocommerceWordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-431277.1 High
- omardabbas products, order & customers export for woocommerce, wpfactory products\, order \& customers export for woocommerce +1 moreWordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerabilityCVE-2024-312765.3 Medium
- wpfactory download plugins and themes from dashboardPath traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior...CVE-2024-351626.5 Medium
- wpfactory ean for woocommerceWordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerabilityCVE-2024-34370Public exploit7.2 High
- wpcodefactory customer email verification for woocommerceCustomer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient RandomnessCVE-2024-41858.1 High
- wpfactory ean for woocommerce, wpcodefactory ean barcode generator for woocommerce: upc, isbn & gtin inventory +1 moreEAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta ShortcodeCVE-2023-68926.4 Medium
- wpfactory ean for woocommerce, wpcodefactory ean barcode generator for woocommerce: upc, isbn & gtin inventory +1 moreEAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via ShortcodeCVE-2023-68974.3 Medium
- wpfactory slugs managerWordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-305364.3 Medium
- wpcodefactory cost of goods: product cost & profit calculator for woocommerce, wpfactory cost of goods for woocommerce +1 moreCost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce <= 3.2.8 - Reflected Cross-Site ScriptingCVE-2024-08216.1 Medium
- wpfactory back button widgetWordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-513996.5 Medium
- omardabbas products, order & customers export for woocommerce, wpfactory products\, order \& customers export for woocommerce +1 moreWordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)CVE-2023-475477.1 High
- flippercode custom css-js-php, wpfactory custom css\, js \& php +1 moreCustom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery BypassCVE-2021-44184.3 Medium
- algoritmika wpfactory helper, wpfactory helper +1 moreWordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-366897.1 High
- unknown file renaming on uploadFile Renaming on Upload < 2.5.2 - Admin+ Stored Cross-Site ScriptingCVE-2023-26844.8 Medium
- unknown ean for woocommerceEAN for WooCommerce < 4.4.3 - Contributor+ Stored XSSCVE-2023-00625.4 Medium
- wpfactory download plugins and themes from dashboardincludes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard...CVE-2019-172396.1 Medium