Threat database

35 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2025-26749Additional Custom Product Tabs for WooCommerce · Cross-site Scripting Medium6.5EPSS 0.3%2025-04-15CVE Database V5CVE-2025-26749 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce product-tabs-for-woocommerce allows Stored XSS.This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through <= 1.7.0. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-04-15
Critical	9.3	EPSS 0.5%	CVE-2025-31553Advanced WooCommerce Product Sales Reporting · SQL Injection Critical9.3EPSS 0.5%2025-04-01CVE Database V5CVE-2025-31553 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows SQL Injection.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through <= 4.1.1. EPSS 0.5%Vulnerability WPFactory	CVE Database V5	2025-04-01
Medium	5.3	EPSS 0.4%	CVE-2025-31848Adverts · Missing Authorization Medium5.3EPSS 0.4%2025-04-01CVE Database V5CVE-2025-31848 Missing Authorization vulnerability in WPFactory Adverts adverts-click-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Adverts: from n/a through <= 1.4. EPSS 0.4%Vulnerability WPFactory	CVE Database V5	2025-04-01
Medium	6.5	EPSS 0.3%	CVE-2025-31598Quantity Dynamic Pricing & Bulk Discounts for WooCommerce · Cross-site Scripting Medium6.5EPSS 0.3%2025-03-31CVE Database V5CVE-2025-31598 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Quantity Dynamic Pricing & Bulk Discounts for WooCommerce wholesale-pricing-woocommerce allows Stored XSS.This issue affects Quantity Dynamic Pricing & Bulk Discounts for WooCommerce: from n/a through <= 4.0.3. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-03-31
Medium	4.3	EPSS 0.3%	CVE-2025-22673EAN for WooCommerce · Missing Authorization Medium4.3EPSS 0.3%2025-03-27CVE Database V5CVE-2025-22673 Missing Authorization vulnerability in WPFactory EAN for WooCommerce ean-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EAN for WooCommerce: from n/a through <= 5.3.5. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-03-27
Medium	4.7	EPSS 0.5%	CVE-2025-30781Scheduled & Automatic Order Status Controller for WooCommerce · Open Redirect Medium4.7EPSS 0.5%2025-03-27CVE Database V5CVE-2025-30781 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WPFactory Scheduled & Automatic Order Status Controller for WooCommerce order-status-rules-for-woocommerce allows Phishing.This issue affects Scheduled & Automatic Order Status Controller for WooCommerce: from n/a through <= 3.7.1. EPSS 0.5%Vulnerability WPFactory	CVE Database V5	2025-03-27
High	7.1	EPSS 0.3%	CVE-2024-56228Wishlist for WooCommerce · Cross-site Scripting High7.1EPSS 0.3%2024-12-31CVE Database V5CVE-2024-56228 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce.This issue affects Wishlist for WooCommerce: from n/a through <= 3.1.2. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2024-12-31
High	7.1	EPSS 0.2%	CVE-2024-54332WP Currency Exchange Rates · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2024-12-16CVE Database V5CVE-2024-54332 Cross-Site Request Forgery (CSRF) vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through <= 1.2.0. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2024-12-16
High	7.1	EPSS 0.3%	CVE-2024-54209Awesome Shortcodes · Cross-site Scripting High7.1EPSS 0.3%2024-12-06CVE Database V5CVE-2024-54209 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Awesome Shortcodes awesome-shortcodes allows Reflected XSS.This issue affects Awesome Shortcodes: from n/a through <= 1.7.2. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2024-12-06
High	7.1	EPSS 0.3%	CVE-2024-44061EU/UK VAT Manager for WooCommerce · Cross-site Scripting High7.1EPSS 0.3%2024-10-20CVE Database V5CVE-2024-44061 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through <= 2.12.14. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2024-10-20
Critical	9.3	EPSS 0.4%	CVE-2024-49305Email Verification for WooCommerce · SQL Injection Critical9.3EPSS 0.4%2024-10-17CVE Database V5CVE-2024-49305 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: from n/a through <= 2.8.10. EPSS 0.4%Vulnerability WPFactory	CVE Database V5	2024-10-17
High	7.1	EPSS 0.3%	CVE-2024-43127Products, Order & Customers Export for WooCommerce · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.1EPSS 0.3%2024-08-12CVE Database V5CVE-2024-43127 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.11. EPSS 0.3%Vulnerability WPFactory #cwe-79	CVE Database V5	2024-08-12
Medium	5.3	EPSS 0.4%	CVE-2024-31276Products, Order & Customers Export for WooCommerce · Missing Authorization Medium5.3EPSS 0.4%2024-06-09CVE Database V5CVE-2024-31276 Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.8. EPSS 0.4%Vulnerability WPFactory #cwe-862	CVE Database V5	2024-06-09
High	7.2	EPSS 1.1%	CVE-2024-34370EAN for WooCommerce · Improper Privilege Management High7.2EPSS 1.1%2024-05-17CVE Database V5CVE-2024-34370 Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9. EPSS 1.1%Vulnerability WPFactory #cwe-269	CVE Database V5	2024-05-17
Medium	4.3	EPSS 0.2%	CVE-2024-30536Slugs Manager · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-03-31CVE Database V5CVE-2024-30536 Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7. EPSS 0.2%Vulnerability WPFactory #cwe-352	CVE Database V5	2024-03-31

Showing 21–35 of 35 results