Log in Start free

impleCode

Products

ProductCVEsExploitedLatest
eCommerce Product Catalog10–Oct 30, 2026
eCommerce Product Catalog Plugin for WordPress7–Dec 21, 2024
Product Catalog Simple7–Oct 22, 2025
Reviews Plus1–Apr 26, 2024

Exploited and recent CVEs

  • CVE-2026-116851 High 7.1 WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-115596 High 7.1 WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-105056 Medium 6.5 WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-96344 High 7.2 WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-76128 Medium 6.4 eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute 0.4%
  • CVE-2026-57360 High 7.1 WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-52693 Critical 9.3 WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability 0.3%
  • CVE-2025-62061 Medium 4.3 WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-58992 Medium 6.5 WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49331 High 7.2 WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability 0.5%
  • CVE-2025-49305 Medium 6.5 WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-1405 Medium 6.4 Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode 0.3%
  • CVE-2024-12771 High 8.8 eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset 0.3%
  • CVE-2024-32822 Medium 4.3 WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability 0.3%
  • CVE-2024-32558 High 7.1 WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-32437 Medium 4.3 WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-51688 Medium 5.3 WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2023-51687 Medium 5.3 WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2023-47839 Medium 6.5 WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2020-36743 Medium 4.3 Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass 0.4%
  • CVE-2021-4392 Medium 4.3 eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass 0.5%
  • CVE-2021-4393 Medium 4.3 eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass 0.5%
  • CVE-2023-29388 High 7.1 WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-25049 Medium 5.9 WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-1470 Medium 4.4 eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.4%