Implecode Ecommerce Product Catalog
8 CVEs affecting Implecode Ecommerce Product Catalog. Latest disclosed: 2023-12-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5979 | Medium | 6.5 | 2023-12-04 | The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to ma… |
CVE-2023-47839 | Medium | 6.5 | 2023-11-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress… |
CVE-2021-24875 | Medium | 6.1 | 2021-11-23 | The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page… |
CVE-2023-25049 | Medium | 5.9 | 2023-04-07 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions. |
CVE-2023-51688 | Medium | 5.3 | 2023-12-29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommer… |
CVE-2023-1470 | Medium | 4.4 | 2023-03-17 | The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and incl… |
CVE-2021-4393 | Medium | 4.3 | 2023-07-01 | The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17. T… |
CVE-2021-4392 | Medium | 4.3 | 2023-07-01 | The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9.43. T… |