Lucene search
+L
ImplecodeProduct Catalog Simple*

3 matches found

CVE
CVE
added 2025/02/28 7:3 a.m.70 views

CVE-2025-1405

CVE-2025-1405 affects the WordPress plugin Product Catalog Simple (post-type-x). It is a stored XSS vulnerability via the plugin’s show_products shortcode in versions up to 1.7.11, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires an ...

6.4CVSS5.7AI score0.00282EPSS
Save
CVE
CVE
added 2023/12/29 2:51 p.m.66 views

CVE-2023-51687

CVE-2023-51687 affects Product Catalog Simple (Post Type-X) for WordPress, with Exposure of Sensitive Information to an Unauthorized Actor via product CSV for versions up to 1.7.6. Connected sources indicate the issue has been patched in a later release; upgrade to a version later than 1.7.6 to r...

7.5CVSS7.8AI score0.0048EPSS
Save
CVE
CVE
added 2023/04/07 2:48 p.m.59 views

CVE-2023-29388

CVE-2023-29388 affects WordPress plugin Product Catalog Simple (post-type-x) version

7.1CVSS6.1AI score0.00382EPSS
Save