Threat database

35 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-112866Product Filter by WBW · SQL Injection Critical9.3EPSS 0.4%2026-10-24CVE Database V5CVE-2026-112866 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6. EPSS 0.4%Vulnerability WPFactory	CVE Database V5	2026-10-24
High	7.2	EPSS 0.4%	CVE-2026-93771Cost of Goods for WooCommerce · Deserialization of Untrusted Data High7.2EPSS 0.4%2026-09-30CVE Database V5CVE-2026-93771 Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. EPSS 0.4%Vulnerability WPFactory #cwe-502	CVE Database V5	2026-09-30
High	7.1	EPSS 0.3%	CVE-2026-39437Min Max Step Quantity Limits Manager for WooCommerce · Cross-site Scripting High7.1EPSS 0.3%2026-06-16CVE Database V5CVE-2026-39437 Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions. EPSS 0.3%Vulnerability WPFactory #cwe-79	CVE Database V5	2026-06-16
Critical	9.3	EPSS 0.3%	CVE-2026-24993Advanced WooCommerce Product Sales Reporting · SQL Injection Critical9.3EPSS 0.3%2026-03-25CVE Database V5CVE-2026-24993 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Blind SQL Injection.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through <= 4.1.3. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2026-03-25
High	7.5	EPSS 0.4%	CVE-2026-23977Helpdesk Support Ticket System for WooCommerce · Missing Authorization High7.5EPSS 0.4%2026-03-25CVE Database V5CVE-2026-23977 Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.2. EPSS 0.4%Vulnerability WPFactory	CVE Database V5	2026-03-25
Medium	5.3	EPSS 0.2%	CVE-2026-24992Advanced WooCommerce Product Sales Reporting · Insertion of Sensitive Information Into Sent Data Medium5.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24992 Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Retrieve Embedded Sensitive Data.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through <= 4.1.2. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2026-02-03
Medium	6.5	EPSS 0.2%	CVE-2025-69334Wishlist for WooCommerce · Cross-site Scripting Medium6.5EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69334 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through <= 3.3.0. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2026-01-06
Medium	6.5	EPSS 0.2%	CVE-2025-62096Maximum Products per User for WooCommerce · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-31CVE Database V5CVE-2025-62096 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Maximum Products per User for WooCommerce maximum-products-per-user-for-woocommerce allows Stored XSS.This issue affects Maximum Products per User for WooCommerce: from n/a through <= 4.4.3. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2025-12-31
Medium	6.5	EPSS 0.2%	CVE-2025-68528Free Shipping Bar: Amount Left for Free Shipping for WooCommerce · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-24CVE Database V5CVE-2025-68528 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Free Shipping Bar: Amount Left for Free Shipping for WooCommerce amount-left-free-shipping-woocommerce allows Stored XSS.This issue affects Free Shipping Bar: Amount Left for Free Shipping for WooCommerce: from n/a through <= 2.4.9. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2025-12-24
Medium	6.5	EPSS 0.3%	CVE-2025-57911Adverts · Cross-site Scripting Medium6.5EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57911 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Adverts adverts-click-tracker allows DOM-Based XSS.This issue affects Adverts: from n/a through <= 1.4. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-09-22
Medium	4.3	EPSS 0.3%	CVE-2025-57972Helpdesk Support Ticket System for WooCommerce · Missing Authorization Medium4.3EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57972 Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through <= 2.1.1. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-58985Additional Custom Product Tabs for WooCommerce · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-09CVE Database V5CVE-2025-58985 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce product-tabs-for-woocommerce allows Stored XSS.This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through <= 1.7.3. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2025-09-09
Critical	9.9	EPSS 0.4%	CVE-2025-49887Product XML Feed Manager for WooCommerce · Code Injection Critical9.9EPSS 0.4%2025-08-14CVE Database V5CVE-2025-49887 Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML Feed Manager for WooCommerce product-xml-feeds-for-woocommerce allows Remote Code Inclusion.This issue affects Product XML Feed Manager for WooCommerce: from n/a through <= 2.9.3. EPSS 0.4%Vulnerability WPFactory	CVE Database V5	2025-08-14
Medium	6.5	EPSS 0.4%	CVE-2025-30959Product XML Feed Manager for WooCommerce · Missing Authorization Medium6.5EPSS 0.4%2025-07-16CVE Database V5CVE-2025-30959 Missing Authorization vulnerability in WPFactory Product XML Feed Manager for WooCommerce product-xml-feeds-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product XML Feed Manager for WooCommerce: from n/a through <= 2.9.2. EPSS 0.4%Vulnerability WPFactory	CVE Database V5	2025-07-16
Medium	6.5	EPSS 0.3%	CVE-2025-49319Wishlist for WooCommerce · Missing Authorization Medium6.5EPSS 0.3%2025-07-16CVE Database V5CVE-2025-49319 Missing Authorization vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist for WooCommerce: from n/a through <= 3.2.3. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-07-16
Medium	5.3	EPSS 0.3%	CVE-2025-49987CRM ERP Business Solution · Missing Authorization Medium5.3EPSS 0.3%2025-06-20CVE Database V5CVE-2025-49987 Missing Authorization vulnerability in WPFactory CRM ERP Business Solution crm-erp-business-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CRM ERP Business Solution: from n/a through <= 1.13. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-06-20
Medium	4.3	EPSS 0.2%	CVE-2025-49510Min Max Step Quantity Limits Manager for WooCommerce · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-06-10CVE Database V5CVE-2025-49510 Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Min Max Step Quantity Limits Manager for WooCommerce product-quantity-for-woocommerce allows Cross Site Request Forgery.This issue affects Min Max Step Quantity Limits Manager for WooCommerce: from n/a through <= 5.1.0. EPSS 0.2%Vulnerability WPFactory	CVE Database V5	2025-06-10
High	7.1	EPSS 0.3%	CVE-2025-32552MSRP (RRP) Pricing for WooCommerce · Cross-site Scripting High7.1EPSS 0.3%2025-04-17CVE Database V5CVE-2025-32552 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory MSRP (RRP) Pricing for WooCommerce msrp-for-woocommerce allows Reflected XSS.This issue affects MSRP (RRP) Pricing for WooCommerce: from n/a through <= 1.8.1. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-04-17
High	7.1	EPSS 0.3%	CVE-2025-32674Product Excel Import Export & Bulk Edit for WooCommerce · Cross-site Scripting High7.1EPSS 0.3%2025-04-17CVE Database V5CVE-2025-32674 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects Product Excel Import Export & Bulk Edit for WooCommerce: from n/a through <= 4.7. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-04-17
Critical	9.6	EPSS 0.3%	CVE-2025-39601Custom CSS, JS & PHP · Cross-Site Request Forgery (CSRF) Critical9.6EPSS 0.3%2025-04-16CVE Database V5CVE-2025-39601 Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1. EPSS 0.3%Vulnerability WPFactory	CVE Database V5	2025-04-16

Showing 1–20 of 35 results