empik
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Empik for Woocommerce | 1 | – | Sep 19, 2026 |
| EmpikPlace for Woocommerce | 1 | – | Apr 11, 2025 |
Exploited and recent CVEs
- CVE-2026-9766 Empik for Woocommerce <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Product Meta Update via empik_csv_process_emp_log_classes AJAX Action 0.4%
- CVE-2025-32568 WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability 0.9%