Implecode vulnerabilities
25 CVEs and advisories name Implecode as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116851WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115596WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-105056WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-96344WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability
- CVE-2026-76128eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
- CVE-2026-57360WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-52693WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
- CVE-2025-62061WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-58992WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-49331WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability
- CVE-2025-49305WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-1405Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode
- CVE-2024-12771eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset
- CVE-2024-32822WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability
- CVE-2024-32558WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32437WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-51688WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure
- CVE-2023-51687WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure
- CVE-2023-47839WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)
- CVE-2020-36743Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass
- CVE-2021-4392eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass
- CVE-2021-4393eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass
- CVE-2023-29388WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25049WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-1470eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting