Ultimate Product Catalog
Approved changes feed: RSS · Atom
cpe:2.3:a:etoilewebdesign:ultimate_product_catalog:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Etoilewebdesign (f745d2a5-3cfc-5a92-9a96-a7766d8976dd) |
|---|---|
| Product | Ultimate Product Catalog (6f741305-94bb-58af-9cc6-1bc3cc5e3838) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/ultimate-product-catalogue |
purl2cpe | 2026-06-01 10:11:26.487285 |
pkg:github/wpplugins/ultimate-product-catalogue |
purl2cpe | 2026-06-01 10:11:26.487288 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-20075 |
vulnerable | 2026-07-28 18:32:21.565229 |
WordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE
HIGH (8.8)
WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users with contributor, editor, author, or administrator roles to upload malicious files by exploiting the custom fields functionality. Attackers can upload PHP shells through the Products tab custom file field and access them via the upcp-product-file-uploads directory to execute arbitrary code on the server.
Published: 2026-06-15T12:00:43.707Z
Updated: 2026-07-15T01:23:21.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47924 |
vulnerable | 2026-06-08 05:38:07.915257 |
WordPress Plugin Ultimate Product Catalogue 5.8.2 Stored XSS via price
MEDIUM (6.4)
Ultimate Product Catalogue 5.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the price parameter. Attackers can submit POST requests to post.php with HTML/JavaScript payloads in the price field to execute arbitrary code when the product is viewed.
Published: 2026-05-10T12:43:46.712Z
Updated: 2026-05-28T14:41:08.339Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.