Josh Kohlbach
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Coupons for WooCommerce Coupons | 3 | – | Apr 8, 2026 |
| Store Exporter | 2 | – | Nov 6, 2025 |
| Wholesale Suite | 2 | – | Mar 5, 2026 |
| Jigoshop – Store Exporter | 1 | – | Nov 19, 2024 |
| Product Feed PRO for WooCommerce | 1 | – | Mar 13, 2026 |
| WooCommerce Store Toolkit | 1 | – | Nov 6, 2025 |
Exploited and recent CVEs
- CVE-2026-39508 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-32443 WordPress Product Feed PRO for WooCommerce plugin <= 13.5.2 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2026-31919 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability 0.3%
- CVE-2026-27541 WordPress Wholesale Suite plugin <= 2.2.6 - Privilege Escalation vulnerability 0.3%
- CVE-2025-60204 WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability 0.5%
- CVE-2025-60203 WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability 0.5%
- CVE-2025-62015 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.6.8 - SQL Injection vulnerability 0.4%
- CVE-2025-49924 WordPress Wholesale Suite plugin <= 2.2.4.2 - Privilege Escalation vulnerability 0.4%
- CVE-2025-32539 WordPress WooCommerce – Store Exporter plugin <= 2.7.4 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-50519 WordPress Jigoshop – Store Exporter plugin <= 1.5.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%