Pluginus.net - vulnerabilities (CVEs)

9 CVEs in 6 products, 6 in the last 30 days, newest from 2026-10-15.

Products

• Mdtf - 4 CVEs
• Active Products Tables For Woocommerce - 1 CVEs
• Bear - 1 CVEs
• Fox - 1 CVEs
• Husky - 1 CVEs
• Wolf - 1 CVEs

Newest CVEs of Pluginus.net

• CVE-2026-108175 - CVSS 6.5 (medium), 2026-10-15: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF…
• CVE-2026-108151 - CVSS 5.3 (medium), 2026-10-14: Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code…
• CVE-2026-108179 - CVSS 7.6 (high), 2026-10-13: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL…
• CVE-2026-108489 - CVSS 5.3 (medium), 2026-10-13: Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce…
• CVE-2026-108174 - CVSS 5.3 (medium), 2026-10-13: Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2026-95608 - CVSS 7.1 (high), 2026-10-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows…
• CVE-2026-54845 - CVSS 8.1 (high), 2026-06-25: Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.
• CVE-2026-54843 - CVSS 9.3 (critical), 2026-06-25: Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.
• CVE-2026-27415 - CVSS 4.3 (medium), 2026-05-07: Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5.