WP
Vendor
WPFactory
72
CVEs
0
On KEV
2
New 30D
Products
PF9.3
Product Filter by WBW
WPFactory
1 CVEs0 on KEV1 new
CO7.2
Cost of Goods for WooCommerce
WPFactory
4 CVEs0 on KEV1 new
EF7.2
EAN for WooCommerce
WPFactory
6 CVEs0 on KEV0 new
WF7.1
Wishlist for WooCommerce
WPFactory
6 CVEs0 on KEV0 new
CE9.3
Customer Email Verification For Woocommerce
Wpfactory
4 CVEs0 on KEV0 new
PO9.8
Products, Order & Customers Export for WooCommerce
WPFactory
4 CVEs0 on KEV0 new
AW9.3
Advanced WooCommerce Product Sales Reporting
WPFactory
3 CVEs0 on KEV0 new
EV6.1
EU/UK VAT Manager for WooCommerce
WPFactory
3 CVEs0 on KEV0 new
AC6.5
Additional Custom Product Tabs for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
AD6.5
Adverts
WPFactory
2 CVEs0 on KEV0 new
BB5.4
Back Button Widget
WPFactory
2 CVEs0 on KEV0 new
CC9.6
Custom CSS, JS & PHP
WPFactory
2 CVEs0 on KEV0 new
DP6.5
Download Plugins And Themes From Dashboard
Wpfactory
2 CVEs0 on KEV0 new
FS6.5
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
HS7.5
Helpdesk Support Ticket System for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
MP6.5
Maximum Products per User for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
MM7.1
Min Max Step Quantity Limits Manager for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
PX9.9
Product XML Feed Manager for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
QD6.5
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce
WPFactory
2 CVEs0 on KEV0 new
WH6.1
Wpfactory Helper
Wpfactory
2 CVEs0 on KEV0 new
AC6.5
Additional Custom Emails & Recipients for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
AS7.1
Awesome Shortcodes
WPFactory
1 CVEs0 on KEV0 new
CA5.4
Change Add to Cart Button Text for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
CA6.5
Coupons & Add to Cart by URL Links for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
CE5.3
CRM ERP Business Solution
WPFactory
1 CVEs0 on KEV0 new
CC6.5
Custom Checkout Fields for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
EV9.3
Email Verification for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
EV5.3
Eu/uk Vat Manager
Wpfactory
1 CVEs0 on KEV0 new
FR4.8
File Renaming ON Upload
Wpfactory
1 CVEs0 on KEV0 new
FS5.4
Free Shipping Bar
Wpfactory
1 CVEs0 on KEV0 new
MR7.1
MSRP (RRP) Pricing for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
PE7.1
Product Excel Import Export & Bulk Edit for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
PN6.5
Product Notes Tab & Private Admin Notes for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
SA4.7
Scheduled & Automatic Order Status Controller for WooCommerce
WPFactory
1 CVEs0 on KEV0 new
SD6.5
Sitewide Discount for WooCommerce: Apply Discount to All Products
WPFactory
1 CVEs0 on KEV0 new
SM4.3
Slugs Manager
WPFactory
1 CVEs0 on KEV0 new
WC7.1
WP Currency Exchange Rates
WPFactory
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112866 New | PF Product Filter by WBW WPFactory | 9.3 | Oct 24 | WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability |
| CVE-2026-93771 | CO Cost of Goods for WooCommerce WPFactory | 7.2 | Sep 30 | WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability |
| CVE-2026-39437 | MM Min Max Step Quantity Limits Manager for WooCommerce WPFactory | 7.1 | Jun 16 | WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-24993 | AW Advanced WooCommerce Product Sales Reporting WPFactory | 9.3 | Mar 25 | WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability |
| CVE-2026-23977 | HS Helpdesk Support Ticket System for WooCommerce WPFactory | 7.5 | Mar 25 | WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability |
| CVE-2026-24992 | AW Advanced WooCommerce Product Sales Reporting WPFactory | 5.3 | Feb 3 | WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability |
| CVE-2025-69334 | WF Wishlist for WooCommerce WPFactory | 6.5 | Jan 6 | WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-62096 | MP Maximum Products per User for WooCommerce WPFactory | 6.5 | Dec 31 | WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68528 | FS Free Shipping Bar: Amount Left for Free Shipping for WooCommerce WPFactory | 6.5 | Dec 24 | WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-57911 | AD Adverts WPFactory | 6.5 | Sep 22 | WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-57972 | HS Helpdesk Support Ticket System for WooCommerce WPFactory | 4.3 | Sep 22 | WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability |
| CVE-2025-58985 | AC Additional Custom Product Tabs for WooCommerce WPFactory | 6.5 | Sep 9 | WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-49887 | PX Product XML Feed Manager for WooCommerce WPFactory | 9.9 | Aug 14 | WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability |
| CVE-2025-30959 | PX Product XML Feed Manager for WooCommerce WPFactory | 6.5 | Jul 16 | WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability |
| CVE-2025-49319 | WF Wishlist for WooCommerce WPFactory | 6.5 | Jul 16 | WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability |
| CVE-2025-49987 | CE CRM ERP Business Solution WPFactory | 5.3 | Jun 20 | WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability |
| CVE-2025-49510 | MM Min Max Step Quantity Limits Manager for WooCommerce WPFactory | 4.3 | Jun 10 | WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-48254 | CA Change Add to Cart Button Text for WooCommerce WPFactory | 5.4 | May 19 | WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48253 | FS Free Shipping Bar: Amount Left for Free Shipping for WooCommerce WPFactory | 5.4 | May 19 | WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48252 | BB Back Button Widget WPFactory | 5.4 | May 19 | WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48251 | AC Additional Custom Emails & Recipients for WooCommerce WPFactory | 6.5 | May 19 | WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48250 | CA Coupons & Add to Cart by URL Links for WooCommerce WPFactory | 6.5 | May 19 | WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48249 | EF EAN for WooCommerce WPFactory | 6.5 | May 19 | WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48248 | SD Sitewide Discount for WooCommerce: Apply Discount to All Products WPFactory | 6.5 | May 19 | WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48240 | CO Cost of Goods for WooCommerce WPFactory | 6.5 | May 19 | WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48239 | PN Product Notes Tab & Private Admin Notes for WooCommerce WPFactory | 6.5 | May 19 | WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-48237 | WF Wishlist for WooCommerce WPFactory | 6.5 | May 19 | WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-47504 | CC Custom Checkout Fields for WooCommerce WPFactory | 6.5 | May 7 | WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-32552 | MR MSRP (RRP) Pricing for WooCommerce WPFactory | 7.1 | Apr 17 | WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-32674 | PE Product Excel Import Export & Bulk Edit for WooCommerce WPFactory | 7.1 | Apr 17 | WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-39601 | CC Custom CSS, JS & PHP WPFactory | 9.6 | Apr 16 | WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability |
| CVE-2025-26749 | AC Additional Custom Product Tabs for WooCommerce WPFactory | 6.5 | Apr 15 | WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-31553 | AW Advanced WooCommerce Product Sales Reporting WPFactory | 9.3 | Apr 1 | WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability |
| CVE-2025-31848 | AD Adverts WPFactory | 5.3 | Apr 1 | WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerability |
| CVE-2025-31598 | QD Quantity Dynamic Pricing & Bulk Discounts for WooCommerce WPFactory | 6.5 | Mar 31 | WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2025-22673 | EF EAN for WooCommerce WPFactory | 4.3 | Mar 27 | WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability |
| CVE-2025-30781 | SA Scheduled & Automatic Order Status Controller for WooCommerce WPFactory | 4.7 | Mar 27 | WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability |
| CVE-2024-13774 | WF Wishlist For Woocommerce Wpfactory | 6.5 | Mar 8 | Wishlist for WooCommerce: Multi Wishlists Per Customer <= 3.1.7 - Cross-Site Request Forgery to Cross-Site Scriping via Wishlist Name |
| CVE-2024-13525 | CE Customer Email Verification For Woocommerce Wpfactory | 6.5 | Feb 15 | Customer Email Verification for WooCommerce <= 2.9.4 - Authenticated (Contributor+) Sensitive Information Exposure |
| CVE-2024-13528 | CE Customer Email Verification For Woocommerce Wpfactory | 7.5 | Feb 12 | Customer Email Verification for WooCommerce <= 2.9.5 - Authentication Bypass via Shortcode |
| CVE-2024-56228 | WF Wishlist for WooCommerce WPFactory | 7.1 | Dec 31 | WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-54332 | WC WP Currency Exchange Rates WPFactory | 7.1 | Dec 16 | WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability |
| CVE-2023-23868 | CO Cost of Goods for WooCommerce WPFactory | 5.4 | Dec 9 | WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability |
| CVE-2024-54209 | AS Awesome Shortcodes WPFactory | 7.1 | Dec 6 | WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-10519 | WF Wishlist For Woocommerce Wpfactory | 6.1 | Nov 23 | Wishlist for WooCommerce: Multi Wishlists Per Customer PRO 3.0.8 - 3.1.2 - Reflected Cross-Site Scripting via wtab Parameter |
| CVE-2024-44061 | EV EU/UK VAT Manager for WooCommerce WPFactory | 6.1 | Oct 20 | WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability |
| CVE-2024-49305 | EV Email Verification for WooCommerce WPFactory | 9.3 | Oct 17 | WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability |
| CVE-2024-9377 | PO Products, Order & Customers Export For Woocommerce Wpfactory | 6.1 | Oct 10 | Products, Order & Customers Export for WooCommerce <= 2.0.15 - Reflected Cross-Site Scripting |
| CVE-2024-9205 | MP Maximum Products Per User For Woocommerce Wpfactory | 6.1 | Oct 10 | Maximum Products per User for WooCommerce <= 4.2.8 - Reflected Cross-Site Scripting |
| CVE-2024-9384 | QD Quantity Dynamic Pricing & Bulk Discounts For Woocommerce Wpfactory | 6.1 | Oct 4 | Quantity Dynamic Pricing & Bulk Discounts for WooCommerce <= 3.8.0 - Reflected Cross-Site Scripting |
| CVE-2024-9189 | EV Eu/uk Vat Manager For Woocommerce Wpfactory | 5.3 | Sep 28 | EU/UK VAT Manager for WooCommerce <= 2.12.12 - Missing Authorization |
| CVE-2024-8788 | EV Eu/uk Vat Manager For Woocommerce Wpfactory | 6.1 | Sep 28 | EU/UK VAT Manager for WooCommerce <= 2.12.12 - Reflected Cross-Site Scripting |
| CVE-2024-8656 | WH Wpfactory Helper Wpfactory | 6.1 | Sep 13 | WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting |
| CVE-2024-43127 | PO Products, Order & Customers Export for WooCommerce WPFactory | 7.1 | Aug 12 | WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-31276 | PO Products, Order & Customers Export for WooCommerce WPFactory | 9.8 | Jun 9 | WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability |
| CVE-2024-35162 | DP Download Plugins And Themes From Dashboard Wpfactory | 6.5 | May 22 | Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6 |
| CVE-2024-34370 | EF EAN for WooCommerce WPFactory | 7.2 | May 17 | WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability |
| CVE-2024-4185 | CE Customer Email Verification For Woocommerce Wpfactory | 8.1 | Apr 30 | Customer Email Verification for WooCommerce <= 2.7.4 - Email Verification and Authentication Bypass due to Insufficient Randomness |
| CVE-2023-6892 | EF Ean For Woocommerce Wpfactory | 5.4 | Apr 18 | EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode |
| CVE-2023-6897 | EF Ean For Woocommerce Wpfactory | 4.3 | Apr 18 | EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode |
