IM
Vendor
implecode
33
CVEs
0
On KEV
3
New 30D
Products
EP9.3
eCommerce Product Catalog
implecode
17 CVEs0 on KEV3 new
EP8.8
eCommerce Product Catalog Plugin for WordPress
implecode
7 CVEs0 on KEV0 new
PC7.5
Product Catalog Simple
implecode
7 CVEs0 on KEV0 new
RP6.5
Reviews Plus
impleCode
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115596 New | EP eCommerce Product Catalog impleCode | 7.1 | Oct 28 | WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-105056 | EP eCommerce Product Catalog impleCode | 6.5 | Oct 5 | WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-96344 | EP eCommerce Product Catalog impleCode | 7.2 | Sep 30 | WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability |
| CVE-2026-76128 | EP eCommerce Product Catalog implecode | 6.4 | Aug 25 | eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute |
| CVE-2026-57360 | EP eCommerce Product Catalog impleCode | 7.1 | Jul 2 | WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-52693 | EP eCommerce Product Catalog impleCode | 9.3 | Jun 15 | WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability |
| CVE-2025-62061 | PC Product Catalog Simple impleCode | 4.3 | Oct 22 | WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-58992 | PC Product Catalog Simple impleCode | 6.5 | Sep 22 | WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-49331 | EP eCommerce Product Catalog impleCode | 7.2 | Jun 17 | WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability |
| CVE-2025-49305 | PC Product Catalog Simple impleCode | 6.5 | Jun 6 | WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-1405 | PC Product Catalog Simple implecode | 5.4 | Feb 28 | Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode |
| CVE-2024-12771 | EP eCommerce Product Catalog Plugin for WordPress implecode | 8.8 | Dec 21 | eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset |
| CVE-2024-32822 | RP Reviews Plus impleCode | 4.3 | Apr 26 | WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability |
| CVE-2024-32558 | EP eCommerce Product Catalog impleCode | 7.1 | Apr 18 | WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-32437 | EP eCommerce Product Catalog impleCode | 4.3 | Apr 15 | WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2023-51688 | EP eCommerce Product Catalog Plugin for WordPress impleCode | 7.5 | Dec 29 | WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure |
| CVE-2023-51687 | PC Product Catalog Simple impleCode | 7.5 | Dec 29 | WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure |
| CVE-2023-5979 | EP Ecommerce Product Catalog Implecode | 6.5 | Dec 4 | eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF |
| CVE-2023-47839 | EP eCommerce Product Catalog Plugin for WordPress impleCode | 5.4 | Nov 22 | WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2020-36743 | PC Product Catalog Simple implecode | 4.3 | Jul 1 | Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass |
| CVE-2021-4392 | EP eCommerce Product Catalog Plugin for WordPress implecode | 4.3 | Jul 1 | eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass |
| CVE-2021-4393 | EP eCommerce Product Catalog Plugin for WordPress implecode | 4.3 | Jul 1 | eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass |
| CVE-2023-29388 | PC Product Catalog Simple impleCode | 6.1 | Apr 7 | WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-25049 | EP eCommerce Product Catalog Plugin for WordPress impleCode | 4.8 | Apr 7 | WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-1470 | EP eCommerce Product Catalog Plugin for WordPress implecode | 4.8 | Mar 17 | eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2021-24894 | RP Reviews Plus Implecode | 6.5 | Nov 23 | The Reviews Plus WordPress plugin before 1.2.14 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service in the review section when… |
| CVE-2021-24875 | EP Ecommerce Product Catalog Implecode | 6.1 | Nov 23 | The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute,… |