pluginus Vulnerability Advisory Catalog

Total 85 security vulnerabilities recorded for pluginus software and firmware.

← Back to All Vendors
CVE-2025-5143 MEDIUM
Component: tableon_-_wordpress_posts_table_filterable

The TableOn โ€“ WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableon_popup_iframe...

๐Ÿ“… 2025-06-21
CVSS 6.4 Dossier →
CVE-2025-3748 MEDIUM
Component: taxonomy_chain_menu

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pn_chain_menu shortcode in all versions up ...

๐Ÿ“… 2025-05-02
CVSS 6.4 Dossier →
CVE-2025-1661 CRITICAL
Component: husky_-_products_filter_professional_for_woocommerce

The HUSKY โ€“ Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includi...

๐Ÿ“… 2025-03-11
CVSS 9.8 Dossier →
CVE-2025-0864 MEDIUM
Component: active_products_tables_for_woocommerce

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ...

๐Ÿ“… 2025-02-18
CVSS 6.1 Dossier →
Component: bear_-_woocommerce_bulk_editor_and_products_manager_professional

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XS...

๐Ÿ“… 2025-02-17
CVSS 5.9 Dossier →
Component: wolf_-_wordpress_posts_bulk_editor_and_products_manager_professional

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This...

๐Ÿ“… 2025-02-03
CVSS 4.9 Dossier →
Component: meta_data_and_taxonomies_filter

The MDTF โ€“ Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mdf_results_by_ajax' sh...

๐Ÿ“… 2025-01-23
CVSS 6.4 Dossier →
Component: wordpress_meta_data_and_taxonomies_filter

The MDTF โ€“ Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in...

๐Ÿ“… 2025-01-08
CVSS 6.5 Dossier →
Component: husky_-_products_filter_professional_for_woocommerce

Missing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security L...

๐Ÿ“… 2024-12-13
CVSS 4.3 Dossier →
Component: inpost_gallery

The The InPost Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution via the inpost_gallery_get_shortcode_template AJAX action i...

๐Ÿ“… 2024-11-26
CVSS 6.3 Dossier →
Component: woocommerce_products_filter

The HUSKY โ€“ Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the really_curr_tax ...

๐Ÿ“… 2024-11-19
CVSS 6.1 Dossier →
Component: wolf_-_wordpress_posts_bulk_editor_and_products_manager_professional

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This...

๐Ÿ“… 2024-11-14
CVSS 4.9 Dossier →
Component: woot

The Active Products Tables for WooCommerce. Use constructor to create tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...

๐Ÿ“… 2024-11-06
CVSS 6.4 Dossier →
Component: meta_data_and_taxonomies_filter

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy...

๐Ÿ“… 2024-10-28
CVSS 6.5 Dossier →
Component: wordpress_meta_data_and_taxonomies_filter

Improper Control of Generation of Code ('Code Injection') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injecti...

๐Ÿ“… 2024-10-28
CVSS 7.3 Dossier →
CVE-2024-7491 MEDIUM
Component: husky_-_products_filter_professional_for_woocommerce

The HUSKY โ€“ Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,...

๐Ÿ“… 2024-09-25
CVSS 5.3 Dossier →
CVE-2024-8624 CRITICAL
Component: wordpress_meta_data_and_taxonomies_filter

The MDTF โ€“ Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' attribute of the 'mdf_select_title' ...

๐Ÿ“… 2024-09-24
CVSS 9.9 Dossier →
Component: wordpress_meta_data_and_taxonomies_filter

The The MDTF โ€“ Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includin...

๐Ÿ“… 2024-09-24
CVSS 7.3 Dossier →
Component: fox_-_currency_switcher_professional_for_woocommerce

The The FOX โ€“ Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to...

๐Ÿ“… 2024-09-14
CVSS 7.3 Dossier →
CVE-2024-43121 CRITICAL
Component: husky_-_products_filter_professional_for_woocommerce

Improper Privilege Management vulnerability in realmag777 HUSKY allows Privilege Escalation.This issue affects HUSKY: from n/a through 1.3.6.1....

๐Ÿ“… 2024-08-13
CVSS 9.1 Dossier →
CVE-2024-6457 CRITICAL
Component: husky_-_products_filter_professional_for_woocommerce

The HUSKY โ€“ Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the โ€˜woof_authorโ€™ paramete...

๐Ÿ“… 2024-07-16
CVSS 9.8 Dossier →
Component: wordpress_meta_data_and_taxonomies_filter

Missing Authorization vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issue affects WordPress Meta Data and Taxonomi...

๐Ÿ“… 2024-06-09
CVSS 4.3 Dossier →
Component: woot

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in realmag777 Active Products Tables for Woo...

๐Ÿ“… 2024-06-08
CVSS 7.1 Dossier →
CVE-2024-5039 MEDIUM
Component: husky_-_products_filter_professional_for_woocommerce

The HUSKY โ€“ Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(...

๐Ÿ“… 2024-05-29
CVSS 6.4 Dossier →
Page 1 of 4 (85 Total Records)