PL
Vendor
Pluginus
90
CVEs
0
On KEV
0
New 30D
Products
BW8.8
Bear - Woocommerce Bulk Editor And Products Manager Professional
Pluginus
18 CVEs0 on KEV0 new
HP9.8
Husky - Products Filter Professional For Woocommerce
Pluginus
14 CVEs0 on KEV0 new
WM9.9
Wordpress Meta Data And Taxonomies Filter
Pluginus
12 CVEs0 on KEV0 new
WW8.8
Wolf - Wordpress Posts Bulk Editor And Products Manager Professional
Pluginus
10 CVEs0 on KEV0 new
WO9.8
Woot
Pluginus
8 CVEs0 on KEV0 new
FC8.8
Fox - Currency Switcher Professional For Woocommerce
Pluginus
7 CVEs0 on KEV0 new
WC8.8
Wordpress Currency Switcher
Pluginus
4 CVEs0 on KEV0 new
IG9.8
Inpost Gallery
Pluginus
3 CVEs0 on KEV0 new
WC5.4
Wordpress Currency Switcher Professional
Pluginus
3 CVEs0 on KEV0 new
MD5.4
Meta Data And Taxonomies Filter
Pluginus
2 CVEs0 on KEV0 new
WP6.1
Woocommerce Products Filter
Pluginus
2 CVEs0 on KEV0 new
AP6.1
Active Products Tables For Woocommerce
Pluginus
1 CVEs0 on KEV0 new
HP8.8
HUSKY – Products Filter for WooCommerce (formerly WOOF)
PluginUS
1 CVEs0 on KEV0 new
TW5.4
Tableon - Wordpress Posts Table Filterable
Pluginus
1 CVEs0 on KEV0 new
TC5.4
Taxonomy Chain Menu
Pluginus
1 CVEs0 on KEV0 new
WW8.8
Wolf - Wordpress Posts Bulk Editor And Manager Professional
Pluginus
1 CVEs0 on KEV0 new
WC6.1
Woocommerce Currency Switcher
Pluginus
1 CVEs0 on KEV0 new
WO6.1
Woocs
Pluginus
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5143 | TW Tableon - Wordpress Posts Table Filterable Pluginus | 5.4 | Jun 21 | TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode |
| CVE-2025-3748 | TC Taxonomy Chain Menu Pluginus | 5.4 | May 2 | Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode |
| CVE-2025-1661 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 9.8 | Mar 11 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion |
| CVE-2025-0864 | AP Active Products Tables For Woocommerce Pluginus | 6.1 | Feb 18 | Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting |
| CVE-2025-26775 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.8 | Feb 17 | WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-24605 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 7.2 | Feb 3 | WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability |
| CVE-2024-13340 | MD Meta Data And Taxonomies Filter Pluginus | 5.4 | Jan 23 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12030 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 6.5 | Jan 8 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection |
| CVE-2023-40334 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Dec 13 | WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability |
| CVE-2024-11002 | IG Inpost Gallery Pluginus | 6.3 | Nov 26 | InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template |
| CVE-2024-11400 | WP Woocommerce Products Filter Pluginus | 6.1 | Nov 19 | HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter |
| CVE-2024-52396 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 8.8 | Nov 14 | WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability |
| CVE-2024-10168 | WO Woot Pluginus | 5.4 | Nov 6 | Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode |
| CVE-2024-50451 | MD Meta Data And Taxonomies Filter Pluginus | 5.4 | Oct 28 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-50450 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 9.8 | Oct 28 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability |
| CVE-2024-7491 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 4.3 | Sep 25 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe |
| CVE-2024-8623 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 7.3 | Sep 24 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution |
| CVE-2024-8624 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 9.9 | Sep 24 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection |
| CVE-2024-8271 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 7.3 | Sep 14 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution |
| CVE-2024-43121 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 7.2 | Aug 13 | WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability |
| CVE-2024-6457 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 7.5 | Jul 16 | HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection |
| CVE-2024-38700 | WC Wordpress Currency Switcher Pluginus | 6.5 | Jul 12 | WordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability |
| CVE-2024-32818 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 8.8 | Jun 9 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability |
| CVE-2024-35730 | WO Woot Pluginus | 6.1 | Jun 8 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-5039 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 6.4 | May 29 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-32680 | HP HUSKY – Products Filter for WooCommerce (formerly WOOF) PluginUS | 8.8 | May 17 | WordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability |
| CVE-2024-34434 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 6.5 | May 17 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability |
| CVE-2024-34558 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 4.8 | May 8 | WordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-3734 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 6.5 | May 2 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution |
| CVE-2024-32691 | WO Woot Pluginus | 5.3 | Apr 22 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability |
| CVE-2024-31430 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 8.8 | Apr 10 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins |
| CVE-2024-30462 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Mar 29 | WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-30463 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 5.3 | Mar 29 | WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability |
| CVE-2024-30456 | WC Wordpress Currency Switcher Pluginus | 8.8 | Mar 29 | WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-30457 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 8.8 | Mar 29 | WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-30458 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 8.8 | Mar 29 | WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-3061 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 7.2 | Mar 29 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion |
| CVE-2024-30200 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 6.1 | Mar 28 | WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-29763 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 6.1 | Mar 27 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-29932 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 5.4 | Mar 27 | WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-29906 | WM Wordpress Meta Data And Taxonomies Filter Pluginus | 5.4 | Mar 27 | WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-24835 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 6.5 | Mar 23 | WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability |
| CVE-2023-50861 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Mar 15 | WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-1795 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 8.8 | Mar 15 | HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection |
| CVE-2024-1796 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 5.4 | Mar 15 | HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-51480 | WO Woot Pluginus | 5.4 | Feb 10 | WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2024-24834 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.8 | Feb 8 | WordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2024-0790 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 4.3 | Feb 5 | WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgery |
| CVE-2024-0796 | WO Woot Pluginus | 4.3 | Feb 5 | Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery |
| CVE-2024-0791 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 4.3 | Feb 5 | WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization |
| CVE-2024-0797 | WO Woot Pluginus | 4.3 | Feb 5 | Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization |
| CVE-2023-51506 | WC Wordpress Currency Switcher Pluginus | 5.4 | Feb 1 | WordPress WPCS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2024-22159 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 6.1 | Jan 31 | WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2021-24566 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 8.8 | Jan 16 | WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion |
| CVE-2023-6556 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 5.4 | Jan 11 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2023-51505 | WO Woot Pluginus | 9.8 | Dec 29 | WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection |
| CVE-2023-40010 | HP Husky - Products Filter Professional For Woocommerce Pluginus | 9.8 | Dec 20 | WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL Injection |
| CVE-2023-49834 | FC Fox - Currency Switcher Professional For Woocommerce Pluginus | 8.8 | Dec 17 | WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-46152 | WW Wolf - Wordpress Posts Bulk Editor And Products Manager Professional Pluginus | 8.8 | Oct 24 | WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-4941 | BW Bear - Woocommerce Bulk Editor And Products Manager Professional Pluginus | 4.3 | Oct 20 | BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation |
