Log in Start free

WPFactory

Products

ProductCVEsExploitedLatest
Wishlist for WooCommerce4–Jan 6, 2026
Products, Order & Customers Export for WooCommerce3–Aug 12, 2024
Cost of Goods for WooCommerce3–Sep 30, 2026
EAN for WooCommerce3–May 19, 2025
Advanced WooCommerce Product Sales Reporting3–Mar 25, 2026
Additional Custom Product Tabs for WooCommerce2–Sep 9, 2025
Min Max Step Quantity Limits Manager for WooCommerce2–Jun 16, 2026
Back Button Widget2–May 19, 2025
Product XML Feed Manager for WooCommerce2–Aug 14, 2025
Adverts2–Sep 22, 2025
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce2–Dec 24, 2025
Helpdesk Support Ticket System for WooCommerce2–Mar 25, 2026
Product Filter by WBW1–Oct 24, 2026
Product Notes Tab & Private Admin Notes for WooCommerce1–May 19, 2025
Quantity Dynamic Pricing & Bulk Discounts for WooCommerce1–Mar 31, 2025
Scheduled & Automatic Order Status Controller for WooCommerce1–Mar 27, 2025
Sitewide Discount for WooCommerce: Apply Discount to All Products1–May 19, 2025
Slugs Manager1–Mar 31, 2024
WP Currency Exchange Rates1–Dec 16, 2024
Additional Custom Emails & Recipients for WooCommerce1–May 19, 2025
WPFactory Helper1–Aug 5, 2023
Awesome Shortcodes1–Dec 6, 2024
Change Add to Cart Button Text for WooCommerce1–May 19, 2025
Coupons & Add to Cart by URL Links for WooCommerce1–May 19, 2025
CRM ERP Business Solution1–Jun 20, 2025
Custom Checkout Fields for WooCommerce1–May 7, 2025
Custom CSS, JS & PHP1–Apr 16, 2025
Email Verification for WooCommerce1–Oct 17, 2024
EU/UK VAT Manager for WooCommerce1–Oct 20, 2024
Maximum Products per User for WooCommerce1–Dec 31, 2025
MSRP (RRP) Pricing for WooCommerce1–Apr 17, 2025
Product Excel Import Export & Bulk Edit for WooCommerce1–Apr 17, 2025

Exploited and recent CVEs

  • CVE-2026-112866 Critical 9.3 WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability 1.2%
  • CVE-2026-93771 High 7.2 WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-39437 High 7.1 WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-24993 Critical 9.3 WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability 0.3%
  • CVE-2026-23977 High 7.5 WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability 0.4%
  • CVE-2026-24992 Medium 5.3 WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2025-69334 Medium 6.5 WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62096 Medium 6.5 WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68528 Medium 6.5 WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-57911 Medium 6.5 WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-57972 Medium 4.3 WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability 0.2%
  • CVE-2025-58985 Medium 6.5 WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49887 Critical 9.9 WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability 0.4%
  • CVE-2025-30959 Medium 6.5 WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-49319 Medium 6.5 WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-49987 Medium 5.3 WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-49510 Medium 4.3 WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-48254 Medium 6.5 WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48253 Medium 6.5 WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48252 Medium 6.5 WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48251 Medium 6.5 WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48250 Medium 6.5 WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48249 Medium 6.5 WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48248 Medium 6.5 WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48240 Medium 6.5 WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48239 Medium 6.5 WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-48237 Medium 6.5 WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-47504 Medium 6.5 WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-32552 High 7.1 WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32674 High 7.1 WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability 0.3%