Log in Start free

RealMag777

Products

ProductCVEsExploitedLatest
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net15–Apr 8, 2026
HUSKY – Products Filter Professional for WooCommerce11–Dec 18, 2025
BEAR8–Oct 6, 2026
WOLF – WordPress Posts Bulk Editor and Manager Professional8–Apr 10, 2024
Active Products Tables for WooCommerce8–Aug 13, 2026
MDTF7–Mar 13, 2026
FOX – Currency Switcher Professional for WooCommerce7–May 28, 2026
WordPress Meta Data and Taxonomies Filter (MDTF)6–Jun 9, 2024
HUSKY6–Oct 30, 2026
WPCS – WordPress Currency Switcher Professional6–Mar 11, 2025
TableOn6–May 27, 2026
Active Products Tables for WooCommerce. Use constructor to create tables6–Mar 26, 2025
InPost Gallery4–Jun 16, 2026
HUSKY – Products Filter for WooCommerce Professional4–Oct 16, 2026
MDTF – Meta Data and Taxonomies Filter4–Jan 23, 2025
WOLF4–Mar 13, 2026
WPCS4–Sep 10, 2026
TableOn – WordPress Posts Table Filterable3–Aug 5, 2026
FOX3–Jun 26, 2026
GMap Targeting2–Feb 20, 2026
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store2–Feb 10, 2024
HUSKY – Products Filter for WooCommerce (formerly WOOF)2–Mar 29, 2024
Active Woot Products Tables for WooCommerce. 100% FREE1–Nov 7, 2026
WordPress Meta Data Filter & Taxonomies Filter1–Jul 14, 2021
Taxonomy Chain Menu1–May 2, 2025
WPCS - WordPress Currency Switcher1–Jul 7, 2021
WOOCS – WooCommerce Currency Switcher1–Mar 29, 2024

Exploited and recent CVEs

  • CVE-2026-120560 Medium 6.5 Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id' Parameters –
  • CVE-2026-116401 High 7.5 WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-115947 Medium 6.5 WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-107646 Medium 5.3 HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script 0.3%
  • CVE-2026-95526 High 7.3 WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability 0.2%
  • CVE-2026-92969 High 8.1 HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX 0.8%
  • CVE-2026-18562 Medium 6.1 HUSKY <= 1.4.3 - Reflected Cross-Site Scripting 0.4%
  • CVE-2026-84816 High 7.1 WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-66436 Critical 9.3 WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability 0.4%
  • CVE-2026-18881 High 7.5 TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter 0.5%
  • CVE-2026-57409 High 7.1 WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57320 High 7.1 WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57319 High 7.1 WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-39574 Critical 9.3 WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability 0.2%
  • CVE-2026-9241 Medium 4.3 FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter 0.2%
  • CVE-2026-42761 Critical 9.3 WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability 0.2%
  • CVE-2026-42755 Critical 9.3 WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability 0.2%
  • CVE-2026-42733 High 7.1 WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-42727 Critical 9.3 WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability 0.3%
  • CVE-2026-4094 High 8.1 FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion 0.3%
  • CVE-2026-45213 High 7.6 WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability 0.2%
  • CVE-2026-1672 Medium 6.5 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification 0.2%
  • CVE-2026-1673 Medium 4.3 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion 0.2%
  • CVE-2026-39501 Medium 5.3 WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-39497 High 7.6 WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability 0.3%
  • CVE-2026-3513 Medium 6.4 TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute 0.3%
  • CVE-2026-32458 High 7.6 WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability 0.2%
  • CVE-2026-32455 Medium 6.5 WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-32450 Medium 6.5 WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-67990 High 7.1 WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability 0.2%