RE
Vendor
realmag777
135
CVEs
0
On KEV
4
New 30D
Products
HP9.8
HUSKY – Products Filter for WooCommerce Professional
realmag777
4 CVEs0 on KEV1 new
HU8.8
HUSKY
realmag777
7 CVEs0 on KEV2 new
BE8.8
BEAR
realmag777
8 CVEs0 on KEV1 new
BB8.8
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
realmag777
15 CVEs0 on KEV0 new
HP9.8
HUSKY – Products Filter Professional for WooCommerce
realmag777
11 CVEs0 on KEV0 new
AP9.3
Active Products Tables for WooCommerce
realmag777
9 CVEs0 on KEV0 new
WW8.8
WOLF – WordPress Posts Bulk Editor and Manager Professional
realmag777
8 CVEs0 on KEV0 new
FC8.8
FOX – Currency Switcher Professional for WooCommerce
realmag777
7 CVEs0 on KEV0 new
MD9.8
MDTF
RealMag777
7 CVEs0 on KEV0 new
AP7.3
Active Products Tables for WooCommerce. Use constructor to create tables
realmag777
6 CVEs0 on KEV0 new
TA9.8
TableOn
RealMag777
6 CVEs0 on KEV0 new
WM8.8
WordPress Meta Data and Taxonomies Filter (MDTF)
realmag777
6 CVEs0 on KEV0 new
WW7.3
WPCS – WordPress Currency Switcher Professional
realmag777
6 CVEs0 on KEV0 new
IG9.3
InPost Gallery
realmag777
4 CVEs0 on KEV0 new
MM9.9
MDTF – Meta Data and Taxonomies Filter
realmag777
4 CVEs0 on KEV0 new
WO8.8
WOLF
realmag777
4 CVEs0 on KEV0 new
WP8.8
WPCS
realmag777
4 CVEs0 on KEV0 new
FO7.6
FOX
RealMag777
3 CVEs0 on KEV0 new
TW7.5
TableOn – WordPress Posts Table Filterable
realmag777
3 CVEs0 on KEV0 new
AP9.8
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store
realmag777
2 CVEs0 on KEV0 new
FS7.3
Fox-currency Switcher Professional
Realmag777
2 CVEs0 on KEV0 new
GT8.8
GMap Targeting
RealMag777
2 CVEs0 on KEV0 new
HP8.8
HUSKY – Products Filter for WooCommerce (formerly WOOF)
realmag777
2 CVEs0 on KEV0 new
TC5.4
Taxonomy Chain Menu
realmag777
1 CVEs0 on KEV0 new
WW8.8
WOOCS – WooCommerce Currency Switcher
realmag777
1 CVEs0 on KEV0 new
WM9.8
Wordpress Meta Data And Taxonomies Filter
Realmag777
1 CVEs0 on KEV0 new
WM8.8
WordPress Meta Data Filter & Taxonomies Filter
realmag777
1 CVEs0 on KEV0 new
WW8.8
WPCS - WordPress Currency Switcher
realmag777
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116401 New | HU HUSKY RealMag777 | 7.5 | Oct 30 | WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability |
| CVE-2026-115947 New | HU HUSKY RealMag777 | 6.5 | Oct 30 | WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability |
| CVE-2026-107646 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 5.3 | Oct 16 | HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script |
| CVE-2026-95526 | BE BEAR RealMag777 | 7.3 | Oct 6 | WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability |
| CVE-2026-92969 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 8.1 | Sep 22 | HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX |
| CVE-2026-18562 | HP HUSKY – Products Filter for WooCommerce Professional realmag777 | 6.1 | Sep 11 | HUSKY <= 1.4.3 - Reflected Cross-Site Scripting |
| CVE-2026-84816 | WP WPCS RealMag777 | 7.1 | Sep 10 | WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66436 | AP Active Products Tables for WooCommerce RealMag777 | 9.3 | Aug 13 | WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability |
| CVE-2026-18881 | TW TableOn – WordPress Posts Table Filterable realmag777 | 7.5 | Aug 5 | TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter |
| CVE-2026-57409 | AP Active Products Tables for WooCommerce RealMag777 | 7.1 | Jul 13 | WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57320 | BE BEAR RealMag777 | 7.1 | Jun 29 | WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57319 | FO FOX RealMag777 | 7.1 | Jun 26 | WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39574 | IG InPost Gallery RealMag777 | 9.3 | Jun 16 | WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability |
| CVE-2026-9241 | FC FOX – Currency Switcher Professional for WooCommerce realmag777 | 4.3 | May 28 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter |
| CVE-2026-42761 | AP Active Products Tables for WooCommerce RealMag777 | 9.3 | May 27 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability |
| CVE-2026-42755 | TA TableOn RealMag777 | 9.3 | May 27 | WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability |
| CVE-2026-42733 | WP WPCS RealMag777 | 7.1 | May 27 | WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42727 | AP Active Products Tables for WooCommerce RealMag777 | 9.3 | May 27 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability |
| CVE-2026-4094 | FC FOX – Currency Switcher Professional for WooCommerce realmag777 | 8.1 | May 15 | FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion |
| CVE-2026-45213 | BE BEAR RealMag777 | 7.6 | May 12 | WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability |
| CVE-2026-1672 | BB BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net realmag777 | 6.5 | Apr 8 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification |
| CVE-2026-1673 | BB BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net realmag777 | 4.3 | Apr 8 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion |
| CVE-2026-39501 | FO FOX RealMag777 | 5.3 | Apr 8 | WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability |
| CVE-2026-39497 | FO FOX RealMag777 | 7.6 | Apr 8 | WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability |
| CVE-2026-3513 | TW TableOn – WordPress Posts Table Filterable realmag777 | 6.4 | Apr 8 | TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute |
| CVE-2026-32458 | WO WOLF RealMag777 | 7.6 | Mar 13 | WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability |
| CVE-2026-32455 | MD MDTF RealMag777 | 6.5 | Mar 13 | WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-32450 | AP Active Products Tables for WooCommerce RealMag777 | 6.5 | Mar 13 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67990 | GT GMap Targeting RealMag777 | 7.1 | Feb 20 | WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69316 | TA TableOn RealMag777 | 7.1 | Jan 22 | WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-13110 | HP HUSKY – Products Filter Professional for WooCommerce realmag777 | 4.3 | Dec 18 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' |
| CVE-2025-13109 | HP HUSKY – Products Filter Professional for WooCommerce realmag777 | 4.3 | Dec 3 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' |
| CVE-2025-60244 | TA TableOn RealMag777 | 7.1 | Nov 6 | WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability |
| CVE-2025-11735 | HP HUSKY – Products Filter Professional for WooCommerce realmag777 | 7.5 | Oct 28 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter |
| CVE-2025-62964 | MD MDTF RealMag777 | 5.3 | Oct 27 | WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability |
| CVE-2025-62069 | MD MDTF RealMag777 | 6.5 | Oct 22 | WordPress MDTF plugin <= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-49907 | MD MDTF RealMag777 | 4.3 | Oct 22 | WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability |
| CVE-2025-57889 | IG InPost Gallery RealMag777 | 7.5 | Sep 5 | WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability |
| CVE-2025-54707 | MD MDTF RealMag777 | 9.3 | Aug 14 | WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability |
| CVE-2025-52732 | GT GMap Targeting RealMag777 | 8.8 | Aug 14 | WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability |
| CVE-2025-5143 | TW TableOn – WordPress Posts Table Filterable realmag777 | 5.4 | Jun 21 | TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode |
| CVE-2025-52708 | HU HUSKY RealMag777 | 7.5 | Jun 20 | WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability |
| CVE-2025-48266 | AP Active Products Tables for WooCommerce RealMag777 | 6.5 | May 19 | WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-3748 | TC Taxonomy Chain Menu realmag777 | 5.4 | May 2 | Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode |
| CVE-2025-32592 | TA TableOn RealMag777 | 7.1 | Apr 17 | WordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26903 | IG InPost Gallery RealMag777 | 4.3 | Apr 15 | WordPress InPost Gallery plugin <= 2.1.4.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-32569 | TA TableOn RealMag777 | 9.8 | Apr 11 | WordPress TableOn plugin <= 1.0.4.3 - PHP Object Injection vulnerability |
| CVE-2025-32218 | TA TableOn RealMag777 | 5.4 | Apr 4 | WordPress TableOn plugin <= 1.0.5.1 - Broken Access Control vulnerability |
| CVE-2025-26890 | HU HUSKY RealMag777 | 7.5 | Mar 27 | WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability |
| CVE-2025-1514 | AP Active Products Tables for WooCommerce. Use constructor to create tables realmag777 | 7.3 | Mar 26 | Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call |
| CVE-2025-2169 | WW WPCS – WordPress Currency Switcher Professional realmag777 | 7.3 | Mar 11 | WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution |
| CVE-2025-1661 | HP HUSKY – Products Filter Professional for WooCommerce realmag777 | 9.8 | Mar 11 | HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion |
| CVE-2025-0864 | AP Active Products Tables for WooCommerce. Use constructor to create tables realmag777 | 6.1 | Feb 18 | Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting |
| CVE-2025-26775 | BE BEAR RealMag777 | 4.8 | Feb 17 | WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-24605 | WO WOLF RealMag777 | 7.2 | Feb 3 | WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability |
| CVE-2024-13340 | MM MDTF – Meta Data and Taxonomies Filter realmag777 | 5.4 | Jan 23 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-12030 | MM MDTF – Meta Data and Taxonomies Filter realmag777 | 6.5 | Jan 8 | MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection |
| CVE-2023-40334 | HU HUSKY RealMag777 | 8.8 | Dec 13 | WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability |
| CVE-2024-10959 | AP Active Products Tables for WooCommerce. Use constructor to create tables realmag777 | 7.3 | Dec 10 | Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth |
| CVE-2024-11002 | IG InPost Gallery realmag777 | 6.3 | Nov 26 | InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template |
