Ecommerce Product Catalog Plugin For Wordpress
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:ecommerce_product_catalog_plugin_for_wordpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Ecommerce Product Catalog Plugin For Wordpress (c63ae342-5ca1-52b2-98a4-6e58f5b0e951) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5979 |
vulnerable | 2026-06-08 06:19:45.293039 |
eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products
Published: 2023-12-04T21:27:37.654Z
Updated: 2024-08-02T08:14:25.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24875 |
vulnerable | 2026-06-08 05:30:39.544272 |
eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting
The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue
Published: 2021-11-23T19:16:16.000Z
Updated: 2024-08-03T19:49:12.695Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.