WP
Vendor
WPFactory
37 products with CVEs on record
72
CVEs
0
On KEV
2
New 30D
Products
PF
Product Filter by WBW
WPFactory
9.3
1 CVEs0 on KEV1 new
CO
Cost of Goods for WooCommerce
WPFactory
7.2
4 CVEs0 on KEV1 new
EF
EAN for WooCommerce
WPFactory
7.2
6 CVEs0 on KEV0 new
WF
Wishlist for WooCommerce
WPFactory
7.1
6 CVEs0 on KEV0 new
CE
Customer Email Verification For Woocommerce
Wpfactory
9.3
4 CVEs0 on KEV0 new
PO
Products, Order & Customers Export for WooCommerce
WPFactory
9.8
4 CVEs0 on KEV0 new
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
9.3
3 CVEs0 on KEV0 new
EV
EU/UK VAT Manager for WooCommerce
WPFactory
6.1
3 CVEs0 on KEV0 new
AC
Additional Custom Product Tabs for WooCommerce
WPFactory
6.5
2 CVEs0 on KEV0 new
AD
Adverts
WPFactory
6.5
2 CVEs0 on KEV0 new
BB
Back Button Widget
WPFactory
5.4
2 CVEs0 on KEV0 new
CC
Custom CSS, JS & PHP
WPFactory
9.6
2 CVEs0 on KEV0 new
DP
Download Plugins And Themes From Dashboard
Wpfactory
6.5
2 CVEs0 on KEV0 new
FS
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
WPFactory
6.5
2 CVEs0 on KEV0 new
HS
Helpdesk Support Ticket System for WooCommerce
WPFactory
7.5
2 CVEs0 on KEV0 new
MP
Maximum Products per User for WooCommerce
WPFactory
6.5
2 CVEs0 on KEV0 new
MM
Min Max Step Quantity Limits Manager for WooCommerce
WPFactory
7.1
2 CVEs0 on KEV0 new
PX
Product XML Feed Manager for WooCommerce
WPFactory
9.9
2 CVEs0 on KEV0 new
QD
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce
WPFactory
6.5
2 CVEs0 on KEV0 new
WH
Wpfactory Helper
Wpfactory
6.1
2 CVEs0 on KEV0 new
AC
Additional Custom Emails & Recipients for WooCommerce
WPFactory
6.5
1 CVEs0 on KEV0 new
AS
Awesome Shortcodes
WPFactory
7.1
1 CVEs0 on KEV0 new
CA
Change Add to Cart Button Text for WooCommerce
WPFactory
5.4
1 CVEs0 on KEV0 new
CA
Coupons & Add to Cart by URL Links for WooCommerce
WPFactory
6.5
1 CVEs0 on KEV0 new
CE
CRM ERP Business Solution
WPFactory
5.3
1 CVEs0 on KEV0 new
CC
Custom Checkout Fields for WooCommerce
WPFactory
6.5
1 CVEs0 on KEV0 new
EV
Email Verification for WooCommerce
WPFactory
9.3
1 CVEs0 on KEV0 new
EV
Eu/uk Vat Manager
Wpfactory
5.3
1 CVEs0 on KEV0 new
FR
File Renaming ON Upload
Wpfactory
4.8
1 CVEs0 on KEV0 new
FS
Free Shipping Bar
Wpfactory
5.4
1 CVEs0 on KEV0 new
MR
MSRP (RRP) Pricing for WooCommerce
WPFactory
7.1
1 CVEs0 on KEV0 new
PE
Product Excel Import Export & Bulk Edit for WooCommerce
WPFactory
7.1
1 CVEs0 on KEV0 new
PN
Product Notes Tab & Private Admin Notes for WooCommerce
WPFactory
6.5
1 CVEs0 on KEV0 new
SA
Scheduled & Automatic Order Status Controller for WooCommerce
WPFactory
4.7
1 CVEs0 on KEV0 new
SD
Sitewide Discount for WooCommerce: Apply Discount to All Products
WPFactory
6.5
1 CVEs0 on KEV0 new
SM
Slugs Manager
WPFactory
4.3
1 CVEs0 on KEV0 new
WC
WP Currency Exchange Rates
WPFactory
7.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112866
New
PF
Product Filter by WBW
WPFactory
9.3
0%
Oct 24WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
CVE-2026-93771
CO
Cost of Goods for WooCommerce
WPFactory
7.2
0%
Sep 30WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability
CVE-2026-39437
MM
Min Max Step Quantity Limits Manager for WooCommerce
WPFactory
7.1
0%
Jun 16WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-24993
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
9.3
0%
Mar 25WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability
CVE-2026-23977
HS
Helpdesk Support Ticket System for WooCommerce
WPFactory
7.5
0%
Mar 25WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-24992
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
5.3
0%
Feb 3WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability
CVE-2025-69334
WF
Wishlist for WooCommerce
WPFactory
6.5
0%
Jan 6WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62096
MP
Maximum Products per User for WooCommerce
WPFactory
6.5
0%
Dec 31WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-68528
FS
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
WPFactory
6.5
0%
Dec 24WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57911
AD
Adverts
WPFactory
6.5
0%
Sep 22WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-57972
HS
Helpdesk Support Ticket System for WooCommerce
WPFactory
4.3
0%
Sep 22WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability
CVE-2025-58985
AC
Additional Custom Product Tabs for WooCommerce
WPFactory
6.5
0%
Sep 9WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-49887
PX
Product XML Feed Manager for WooCommerce
WPFactory
9.9
0%
Aug 14WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability
CVE-2025-30959
PX
Product XML Feed Manager for WooCommerce
WPFactory
6.5
0%
Jul 16WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability
CVE-2025-49319
WF
Wishlist for WooCommerce
WPFactory
6.5
0%
Jul 16WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability
CVE-2025-49987
CE
CRM ERP Business Solution
WPFactory
5.3
0%
Jun 20WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability
CVE-2025-49510
MM
Min Max Step Quantity Limits Manager for WooCommerce
WPFactory
4.3
0%
Jun 10WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-48254
CA
Change Add to Cart Button Text for WooCommerce
WPFactory
5.4
0%
May 19WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48253
FS
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
WPFactory
5.4
0%
May 19WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48252
BB
Back Button Widget
WPFactory
5.4
0%
May 19WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48251
AC
Additional Custom Emails & Recipients for WooCommerce
WPFactory
6.5
0%
May 19WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48250
CA
Coupons & Add to Cart by URL Links for WooCommerce
WPFactory
6.5
0%
May 19WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48249
EF
EAN for WooCommerce
WPFactory
6.5
0%
May 19WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48248
SD
Sitewide Discount for WooCommerce: Apply Discount to All Products
WPFactory
6.5
0%
May 19WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48240
CO
Cost of Goods for WooCommerce
WPFactory
6.5
0%
May 19WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48239
PN
Product Notes Tab & Private Admin Notes for WooCommerce
WPFactory
6.5
0%
May 19WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-48237
WF
Wishlist for WooCommerce
WPFactory
6.5
0%
May 19WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47504
CC
Custom Checkout Fields for WooCommerce
WPFactory
6.5
0%
May 7WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-32552
MR
MSRP (RRP) Pricing for WooCommerce
WPFactory
7.1
0%
Apr 17WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32674
PE
Product Excel Import Export & Bulk Edit for WooCommerce
WPFactory
7.1
0%
Apr 17WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-39601
CC
Custom CSS, JS & PHP
WPFactory
9.6
0%
Apr 16WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability
CVE-2025-26749
AC
Additional Custom Product Tabs for WooCommerce
WPFactory
6.5
0%
Apr 15WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-31553
AW
Advanced WooCommerce Product Sales Reporting
WPFactory
9.3
1%
Apr 1WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability
CVE-2025-31848
AD
Adverts
WPFactory
5.3
0%
Apr 1WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerability
CVE-2025-31598
QD
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce
WPFactory
6.5
0%
Mar 31WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-22673
EF
EAN for WooCommerce
WPFactory
4.3
0%
Mar 27WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability
CVE-2025-30781
SA
Scheduled & Automatic Order Status Controller for WooCommerce
WPFactory
4.7
0%
Mar 27WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability
CVE-2024-13774
WF
Wishlist For Woocommerce
Wpfactory
6.5
0%
Mar 8Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name
CVE-2024-13525
CE
Customer Email Verification For Woocommerce
Wpfactory
6.5
0%
Feb 15Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure
CVE-2024-13528
CE
Customer Email Verification For Woocommerce
Wpfactory
7.5
0%
Feb 12Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode
CVE-2024-56228
WF
Wishlist for WooCommerce
WPFactory
7.1
0%
Dec 31WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-54332
WC
WP Currency Exchange Rates
WPFactory
7.1
0%
Dec 16WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability
CVE-2023-23868
CO
Cost of Goods for WooCommerce
WPFactory
5.4
1%
Dec 9WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability
CVE-2024-54209
AS
Awesome Shortcodes
WPFactory
7.1
0%
Dec 6WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-10519
WF
Wishlist For Woocommerce
Wpfactory
6.1
1%
Nov 23Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter
CVE-2024-44061
EV
EU/UK VAT Manager for WooCommerce
WPFactory
6.1
0%
Oct 20WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability
CVE-2024-49305
EV
Email Verification for WooCommerce
WPFactory
9.3
0%
Oct 17WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability
CVE-2024-9377
PO
Products, Order & Customers Export For Woocommerce
Wpfactory
6.1
0%
Oct 10Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting
CVE-2024-9205
MP
Maximum Products Per User For Woocommerce
Wpfactory
6.1
0%
Oct 10Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting
CVE-2024-9384
QD
Quantity Dynamic Pricing & Bulk Discounts For Woocommerce
Wpfactory
6.1
0%
Oct 4Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting
CVE-2024-9189
EV
Eu/uk Vat Manager For Woocommerce
Wpfactory
5.3
0%
Sep 28EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization
CVE-2024-8788
EV
Eu/uk Vat Manager For Woocommerce
Wpfactory
6.1
0%
Sep 28EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting
CVE-2024-8656
WH
Wpfactory Helper
Wpfactory
6.1
0%
Sep 13WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
CVE-2024-43127
PO
Products, Order & Customers Export for WooCommerce
WPFactory
7.1
0%
Aug 12WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-31276
PO
Products, Order & Customers Export for WooCommerce
WPFactory
9.8
0%
Jun 9WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability
CVE-2024-35162
DP
Download Plugins And Themes From Dashboard
Wpfactory
6.5
1%
May 22Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6
CVE-2024-34370
EF
EAN for WooCommerce
WPFactory
7.2
1%
May 17WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability
CVE-2024-4185
CE
Customer Email Verification For Woocommerce
Wpfactory
8.1
1%
Apr 30Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness
CVE-2023-6892
EF
Ean For Woocommerce
Wpfactory
5.4
0%
Apr 18EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode
CVE-2023-6897
EF
Ean For Woocommerce
Wpfactory
4.3
0%
Apr 18EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode