CedCommerce
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Advanced PDF | 2 | – | Dec 31, 2025 |
| One Click Order Re-Order | 1 | – | Jul 4, 2024 |
| Product Lister for eBay | 1 | – | Apr 24, 2025 |
| CedCommerce Integration for Good Market | 1 | – | Dec 29, 2025 |
| Ship Per Product | 1 | – | Apr 1, 2025 |
| Wholesale Market | 1 | – | Aug 15, 2026 |
| Recently viewed and most viewed products | 1 | – | Nov 14, 2023 |
Exploited and recent CVEs
- CVE-2026-14279 Wholesale Market <= 2.2.2 - Authenticated (Subscriber+) Privilege Escalation via 'role_required' Parameter 0.5%
- CVE-2025-62138 WordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerability 0.2%
- CVE-2025-68877 WordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerability 0.3%
- CVE-2025-57945 WordPress WP Advanced PDF Plugin <= 1.1.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
- CVE-2025-39384 WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability 0.8%
- CVE-2025-31773 WordPress Ship Per Product plugin <= 2.1.0 - Broken Access Control vulnerability 0.6%
- CVE-2024-5641 One Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
- CVE-2023-47646 WordPress Recently viewed and most viewed products Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS) 0.4%