Ecommerce Product Catalog
Approved changes feed: RSS · Atom
cpe:2.3:a:implecode:ecommerce_product_catalog:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Implecode (e53fffb8-717a-58ab-b559-1b65b6bd52e6) |
|---|---|
| Product | Ecommerce Product Catalog (78142d4d-975a-5e08-acc7-37d0652b8bff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/implecode/ecommerce-product-catalog |
purl2cpe | 2026-06-01 10:10:59.188337 |
pkg:github/wp-plugins/ecommerce-product-catalog |
purl2cpe | 2026-06-01 10:10:59.188339 |
pkg:github/wpplugins/ecommerce-product-catalog |
purl2cpe | 2026-06-01 10:10:59.188340 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57360 |
vulnerable | 2026-07-29 01:00:29.662024 |
WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.
Published: 2026-07-02T11:15:20.147Z
Updated: 2026-07-02T14:32:52.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52693 |
vulnerable | 2026-07-29 00:57:48.899800 |
WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.
Published: 2026-06-15T20:19:30.813Z
Updated: 2026-06-15T21:36:28.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49331 |
vulnerable | 2026-06-08 07:29:12.934812 |
WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability
HIGH (7.2)
Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Object Injection.This issue affects eCommerce Product Catalog: from n/a through <= 3.4.3.
Published: 2025-06-17T15:01:22.874Z
Updated: 2026-04-28T16:13:01.383Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32558 |
vulnerable | 2026-06-08 06:37:23.163686 |
WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog allows Reflected XSS.This issue affects eCommerce Product Catalog: from n/a through 3.3.32.
Published: 2024-04-18T10:08:48.366Z
Updated: 2026-04-28T16:09:37.620Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32437 |
vulnerable | 2026-06-08 06:35:33.122544 |
WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce Product Catalog: from n/a through 3.3.28.
Published: 2024-04-15T08:07:25.905Z
Updated: 2026-04-28T16:09:35.524Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.