Pluginus - vulnerabilities (CVEs)

89 CVEs in 18 products, 0 in the last 30 days, newest from 2026-05-13.

Products

Bear - Woocommerce Bulk Editor And Products Manager Professional - 18 CVEs
Husky - Products Filter Professional For Woocommerce - 15 CVEs
Wordpress Meta Data And Taxonomies Filter - 12 CVEs
Wolf - Wordpress Posts Bulk Editor And Products Manager Professional - 10 CVEs
Woot - 8 CVEs
Fox - Currency Switcher Professional For Woocommerce - 7 CVEs
Wordpress Currency Switcher - 4 CVEs
Inpost Gallery - 3 CVEs
Wordpress Currency Switcher Professional - 3 CVEs
Meta Data And Taxonomies Filter - 2 CVEs
Woocommerce Products Filter - 2 CVEs
Active Products Tables For Woocommerce - 1 CVEs
Husky Products Filter For Woocommerce Formerly Woof - 1 CVEs
Tableon - Wordpress Posts Table Filterable - 1 CVEs
Taxonomy Chain Menu - 1 CVEs
Wolf - Wordpress Posts Bulk Editor And Manager Professional - 1 CVEs
Woocommerce Currency Switcher - 1 CVEs
Woocs - 1 CVEs

Newest CVEs of Pluginus

CVE-2020-37174 - CVSS 5.5 (medium), 2026-05-13: WOOF Products Filter for WooCommerce 1.2.3 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious…
CVE-2025-5143 - CVSS 6.4 (medium), 2025-06-21: The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableon_popup_iframe_button…
CVE-2025-3748 - CVSS 6.4 (medium), 2025-05-02: The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pn_chain_menu shortcode in all versions up to, and…
CVE-2025-1661 - CVSS 9.8 (critical), 2025-03-11: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,…
CVE-2025-0864 - CVSS 6.1 (medium), 2025-02-18: The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
CVE-2025-26775 - CVSS 5.9 (medium), 2025-02-17: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This…
CVE-2025-24605 - CVSS 7.5 (high), 2025-02-03: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue…
CVE-2024-13340 - CVSS 6.4 (medium), 2025-01-23: The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdf_results_by_ajax' shortcode…
CVE-2024-12030 - CVSS 6.5 (medium), 2025-01-08: The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in all…
CVE-2023-40334 - CVSS 8.8 (high), 2024-12-13: Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security…
CVE-2024-11002 - CVSS 6.3 (medium), 2024-11-26: The The InPost Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution via the inpost_gallery_get_shortcode_template AJAX action in all…
CVE-2024-11400 - CVSS 6.1 (medium), 2024-11-19: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the really_curr_tax…
CVE-2024-52396 - CVSS 8.8 (high), 2024-11-14: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue…
CVE-2024-10168 - CVSS 6.4 (medium), 2024-11-06: The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
CVE-2024-50451 - CVSS 6.5 (medium), 2024-10-28: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF…
CVE-2024-50450 - CVSS 9.8 (critical), 2024-10-28: Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This…
CVE-2024-7491 - CVSS 5.3 (medium), 2024-09-25: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and…
CVE-2024-8624 - CVSS 9.9 (critical), 2024-09-24: The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title'…
CVE-2024-8623 - CVSS 7.3 (high), 2024-09-24: The The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including,…
CVE-2024-8271 - CVSS 7.3 (high), 2024-09-14: The The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…
CVE-2024-43121 - CVSS 9.1 (critical), 2024-08-13: Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1.
CVE-2024-6457 - CVSS 9.8 (critical), 2024-07-16: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the ‘woof_author’ parameter in all…
CVE-2024-38700 - CVSS 6.5 (medium), 2024-07-12: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in realmag777 WPCS allows Code Injection.This…
CVE-2024-32818 - CVSS 8.8 (high), 2024-06-09: Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomies…
CVE-2024-35730 - CVSS 7.1 (high), 2024-06-08: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommerce…
CVE-2024-5039 - CVSS 6.4 (medium), 2024-05-29: The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in…
CVE-2024-34434 - CVSS 6.5 (medium), 2024-05-17: Incorrect Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Code Inclusion, Functionality Misuse.This issue…
CVE-2024-32680 - CVSS 8.8 (high), 2024-05-17: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Control of Generation of Code ('Code Injection') vulnerability in…
CVE-2024-34558 - CVSS 5.9 (medium), 2024-05-08: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects…
CVE-2024-3734 - CVSS 6.5 (medium), 2024-05-02: The FOX – Currency Switcher Professional for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and…