WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting

WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-site scripting vulnerability. The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute. This can allow an attacker to steal cookie-based authentication credentials an...

CVE-2026-42388

Incomplete validation of the SOA record present in a catalog zone might lead to a crash...

CVE-2026-42388 Missing input validation for catalog zones

Incomplete validation of the SOA record present in a catalog zone might lead to a crash...

EUVD-2026-39358

Incomplete validation of the SOA record present in a catalog zone might lead to a crash...

CVE-2026-42388

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-42388

Incomplete validation of the SOA record present in a catalog zone might lead to a crash...

CVE-2019-13396

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0036015-b021-498e-9a48-fb6d161e83f2...

CVE-2020-15916

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec2ebfd8-d9b7-4f53-94e9-e12744080726...

CVE-2021-35327

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:18+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa0203c2-14f0-4d9e-8df1-cc101cebddcf...

CVE-2021-32819

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:18+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7693f105-6e7c-4da5-9b92-d39f291e7743...

CVE-2021-39509

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:18+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eebbb5b3-1e7e-4a0c-a700-57c26308a5a3...

CVE-2021-44892

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:17+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f9b9aff-5b4f-4c78-8c9b-b99bdaf370ea...

CVE-2022-1883

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:15+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/139c7085-bd75-4258-9bb8-e7f8d045d965...

CVE-2024-32737

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:10+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3381d2d5-7b41-475f-af53-9becd9af922a...

CVE-2024-32739

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:10+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b5fb329-f71a-41fd-86fd-5593b79c7726...

CVE-2024-4841

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:09+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/523e02eb-754c-419a-8ef2-82f1efb21626...

MINI-F4PP-3XHX-HFHJ

Bulletin has no description...

CVE-2007-4429

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e266fba-200b-4258-b2f9-39832a04f57f...

CVE-2007-4246

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/273f1de4-4095-49a6-aefc-1e68836f3562...

CVE-2008-1841

creationtimestamp| type| source ---|---|--- 2026-06-19 16:45:42+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/482f9788-fce3-405e-a7e0-d06a21629e87 2026-06-23 14:04:17+00:00| exploited|...