pluginus Vulnerability Advisory Catalog

Total 85 security vulnerabilities recorded for pluginus software and firmware.

← Back to All Vendors
CVE-2023-2556 MEDIUM
Component: wordpress_currency_switcher

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit...

📅 2023-06-09
CVSS 4.3 Dossier →
CVE-2023-2555 MEDIUM
Component: wordpress_currency_switcher_professional

The WPCS – WordPress Currency Switcher Professional plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit...

📅 2023-06-09
CVSS 4.3 Dossier →
Component: bear_-_woocommerce_bulk_editor_and_products_manager_professional

Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <= 1.1.3.1 versions....

📅 2023-05-28
CVSS 6.5 Dossier →
Component: inpost_gallery

The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to t...

📅 2023-03-22
CVSS 5.4 Dossier →
Component: wordpress_meta_data_and_taxonomies_filter

The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_n...

📅 2023-03-22
CVSS 5.4 Dossier →
Component: husky_-_products_filter_professional_for_woocommerce

The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to per...

📅 2023-02-06
CVSS 7.2 Dossier →
CVE-2022-4431 MEDIUM
Component: fox_-_currency_switcher_professional_for_woocommerce

The WOOCS WordPress plugin before 1.3.9.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which...

📅 2023-01-16
CVSS 5.4 Dossier →
CVE-2022-4063 CRITICAL
Component: inpost_gallery

The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the...

📅 2022-12-19
CVSS 9.8 Dossier →
CVE-2022-1916 MEDIUM
Component: woot

The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and esc...

📅 2022-06-27
CVSS 6.1 Dossier →
CVE-2022-0234 MEDIUM
Component: woocs

The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJAX...

📅 2022-02-21
CVSS 6.1 Dossier →
Component: woocommerce_products_filter

The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Re...

📅 2022-02-01
CVSS 6.1 Dossier →
Component: woocommerce_currency_switcher

The WOOCS WordPress plugin before 1.3.7.3 does not sanitise and escape the custom_prices parameter before outputting it back in the response, leading ...

📅 2022-01-10
CVSS 6.1 Dossier →
Component: wordpress_meta_data_and_taxonomies_filter

Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2....

📅 2021-07-14
CVSS 8.8 Dossier →
Page 4 of 4 (85 Total Records)