Implecode

Ecommerce Product Catalog

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2021-4393

Exploit
  • EPSS 0.48%
  • Veröffentlicht 01.07.2023 05:15:15
  • Zuletzt bearbeitet 08.04.2026 17:16:41

The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.17. This is due to missing or incorrect nonce validation on the save() function. This makes it p...

4.8

CVE-2023-25049

  • EPSS 0.39%
  • Veröffentlicht 07.04.2023 12:15:07
  • Zuletzt bearbeitet 21.11.2024 07:49:00

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.4 versions.

4.8

CVE-2023-1470

  • EPSS 0.38%
  • Veröffentlicht 17.03.2023 14:15:12
  • Zuletzt bearbeitet 08.04.2026 17:16:53

The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it poss...

6.1

CVE-2021-24875

  • EPSS 1.56%
  • Veröffentlicht 23.11.2021 20:15:10
  • Zuletzt bearbeitet 21.11.2024 05:53:56

The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not escape the ic-settings-search parameter before outputting it back in the page in an attribute, leading to a Reflected Cross-Site Scripting issue