Lucene search

Product Catalog Simple Security Vulnerabilities - 2023

cve

CVE-2020-36743

The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13. This is due to missing or incorrect nonce validation on the implecode_save_products_meta() function. This makes it possible for unauthenticated attackers to update p...

4.3CVSS

4.3AI Score

0.001EPSS

2023-07-01 05:15 AM

cve

CVE-2023-29388

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in impleCode Product Catalog Simple plugin <= 1.6.17 versions.

7.1CVSS

6AI Score

0.001EPSS

2023-04-07 03:15 PM

cve

CVE-2023-51687

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6.

7.5CVSS

7.6AI Score

0.001EPSS

2023-12-29 03:15 PM