Josh Kohlbach vulnerabilities and threats

10 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-39508Advanced Coupons for WooCommerce Coupons (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39508 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows DOM-Based XSS.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.7.1.1. EPSS 0.2%Vulnerability Josh Kohlbach	CVE Database V5	2026-04-08
Medium	6.5	EPSS 0.1%	CVE-2026-32443Product Feed PRO for WooCommerce (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium6.5EPSS 0.1%2026-03-13CVE Database V5CVE-2026-32443 Cross-Site Request Forgery (CSRF) vulnerability in Josh Kohlbach Product Feed PRO for WooCommerce woo-product-feed-pro allows Cross Site Request Forgery.This issue affects Product Feed PRO for WooCommerce: from n/a through <= 13.5.2. EPSS 0.1%Vulnerability Josh Kohlbach	CVE Database V5	2026-03-13
Medium	4.3	EPSS 0.3%	CVE-2026-31919Advanced Coupons for WooCommerce Coupons (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-31919 Missing Authorization vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.7.1. EPSS 0.3%Vulnerability Josh Kohlbach	CVE Database V5	2026-03-13
High	7.2	EPSS 0.3%	CVE-2026-27541Wholesale Suite (WordPress plugin) · Incorrect Privilege Assignment High7.2EPSS 0.3%2026-03-05CVE Database V5CVE-2026-27541 Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite allows Privilege Escalation. This issue affects Wholesale Suite: through 2.2.6. EPSS 0.3%Vulnerability Josh Kohlbach CWE-266	CVE Database V5	2026-03-05
High	7.5	EPSS 0.5%	CVE-2025-60204WooCommerce Store Toolkit (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2025-11-06CVE Database V5CVE-2025-60204 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach WooCommerce Store Toolkit woocommerce-store-toolkit allows PHP Local File Inclusion.This issue affects WooCommerce Store Toolkit: from n/a through <= 2.4.3. EPSS 0.5%Vulnerability Josh Kohlbach	CVE Database V5	2025-11-06
High	7.5	EPSS 0.5%	CVE-2025-60203Store Exporter (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.5%2025-11-06CVE Database V5CVE-2025-60203 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows PHP Local File Inclusion.This issue affects Store Exporter: from n/a through <= 2.7.6. EPSS 0.5%Vulnerability Josh Kohlbach	CVE Database V5	2025-11-06
High	7.6	EPSS 0.4%	CVE-2025-62015Advanced Coupons for WooCommerce Coupons (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2025-10-22CVE Database V5CVE-2025-62015 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free.This issue affects Advanced Coupons for WooCommerce Coupons: from n/a through <= 4.6.8. EPSS 0.4%Vulnerability Josh Kohlbach	CVE Database V5	2025-10-22
High	7.2	EPSS 0.4%	CVE-2025-49924Wholesale Suite (WordPress plugin) · Incorrect Privilege Assignment High7.2EPSS 0.4%2025-10-22CVE Database V5CVE-2025-49924 Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through <= 2.2.4.2. EPSS 0.4%Vulnerability Josh Kohlbach	CVE Database V5	2025-10-22
High	7.1	EPSS 0.4%	CVE-2025-32539Store Exporter (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2025-04-11CVE Database V5CVE-2025-32539 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Store Exporter woocommerce-exporter allows Reflected XSS.This issue affects Store Exporter: from n/a through <= 2.7.4. EPSS 0.4%Vulnerability Josh Kohlbach	CVE Database V5	2025-04-11
High	7.1	EPSS 0.4%	CVE-2024-50519Jigoshop (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-11-19CVE Database V5CVE-2024-50519 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Jigoshop – Store Exporter jigoshop-exporter allows Reflected XSS.This issue affects Jigoshop – Store Exporter: from n/a through <= 1.5.8. EPSS 0.4%Vulnerability Josh Kohlbach	CVE Database V5	2024-11-19

Page 1 of 1