CVE-2025-1405

CVE-2025-1405 affects the WordPress plugin Product Catalog Simple (post-type-x). It is a stored XSS vulnerability via the plugin’s show_products shortcode in versions up to 1.7.11, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires an ...

CVE-2023-51687

CVE-2023-51687 affects Product Catalog Simple (Post Type-X) for WordPress, with Exposure of Sensitive Information to an Unauthorized Actor via product CSV for versions up to 1.7.6. Connected sources indicate the issue has been patched in a later release; upgrade to a version later than 1.7.6 to r...

CVE-2023-29388

CVE-2023-29388 affects WordPress plugin Product Catalog Simple (post-type-x) version

CVE-2020-36743

The CVE-2020-36743 entry concerns the WordPress Product Catalog Simple plugin (versions up to and including 1.5.13). The root cause is missing or incorrect nonce validation in the implecode_save_products_meta() function, allowing unauthenticated attackers to update product metadata by misleading ...