CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

EUVD-2017-9688

Malware in sbrugna...

CVE-2025-30985 WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through = 1.5.4...

WordPress GNUCommerce Plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin GNUCommerce versions = 1.5.4...

CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

CVE-2017-18572

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

CVE-2016-10920

The gnucommerce plugin before 0.5.7-BETA for WordPress has XSS...

Cross site scripting

The gnucommerce plugin before 1.4.2 for WordPress has XSS...

PT-2019-7716

Name of the Vulnerable Software and Affected Versions Gnucommerce plugin versions prior to 0.5.7-BETA Description The issue allows for cross-site scripting XSS attacks. Recommendations For versions prior to 0.5.7-BETA, update to version 0.5.7-BETA or later to resolve the issue...

PT-2019-8506

Name of the Vulnerable Software and Affected Versions WordPress gnucommerce plugin versions prior to 1.4.2 Description The issue affects the gnucommerce plugin for WordPress, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 1.4.2, update to version 1.4.2 or lat...