mihail-barinov
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Woo Labels – Product Labels & Badges for WooCommerce | 3 | – | Oct 1, 2026 |
| Advanced Woo Search – Product Search for WooCommerce | 3 | – | Mar 25, 2025 |
| Share This Image | 3 | – | Sep 17, 2024 |
Exploited and recent CVEs
- CVE-2026-12241 Advanced Woo Labels – Product Labels & Badges for WooCommerce <= 2.51 - Improper Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2026-15662 Advanced Woo Labels <= 2.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'bg_color' Parameter 0.4%
- CVE-2026-1929 Advanced Woo Labels <= 2.37 - Authenticated (Contributor+) Remote Code Execution via 'callback' Parameter 0.6%
- CVE-2025-2302 Advanced Woo Search <= 3.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via aws_search_terms Shortcode 0.3%
- CVE-2024-8761 Share This Image <= 2.03 - Open Redirect via link Parameter 0.5%
- CVE-2024-8363 Share This Image <= 2.02 - Authenticated (Contributor+) Stored Cross-Site Scripting via STI Buttons Shortcode 0.4%
- CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter 0.4%
- CVE-2024-0251 Advanced Woo Search <= 2.96 - Reflected Cross-Site Scripting 0.5%
- CVE-2023-2452 Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting 0.5%