Ecommerce Product Catalog

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:implecode:ecommerce_product_catalog:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorImplecode (e53fffb8-717a-58ab-b559-1b65b6bd52e6)
ProductEcommerce Product Catalog (78142d4d-975a-5e08-acc7-37d0652b8bff)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5979 vulnerable 2026-06-08 06:19:45.295789 eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF
The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products
Published: 2023-12-04T21:27:37.654Z
Updated: 2024-08-02T08:14:25.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51688 vulnerable 2026-06-08 06:17:53.746706 WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3.26.
Published: 2023-12-29T14:53:55.107Z
Updated: 2026-04-28T16:09:04.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47839 vulnerable 2026-06-08 06:14:25.819447 WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.26 versions.
Published: 2023-11-22T23:22:55.536Z
Updated: 2026-04-28T16:08:52.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25049 vulnerable 2026-06-08 05:56:08.449999 WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions.
Published: 2023-04-07T11:12:16.983Z
Updated: 2026-04-28T16:08:07.392Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1470 vulnerable 2026-06-08 05:52:35.962790 eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
MEDIUM (4.4)
The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Published: 2023-03-17T13:13:15.254Z
Updated: 2026-04-08T16:42:47.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4393 vulnerable 2026-06-08 05:38:09.328330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4392 vulnerable 2026-06-08 05:38:09.327826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24875 vulnerable 2026-06-08 05:30:39.544905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.