# cve.now: Implecode

The newest entries naming Implecode as an affected vendor (up to 200), of 25 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116851](https://cve.now/CVE-2026-116851.md): WordPress eCommerce Product Catalog plugin \<= 3.6.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-115596](https://cve.now/CVE-2026-115596.md): WordPress eCommerce Product Catalog plugin \<= 3.6.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-105056](https://cve.now/CVE-2026-105056.md): WordPress eCommerce Product Catalog plugin \<= 3.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-96344](https://cve.now/CVE-2026-96344.md): WordPress eCommerce Product Catalog plugin \<= 3.6.0 - PHP Object Injection vulnerability (CVSS 7.2)
- [CVE-2026-76128](https://cve.now/CVE-2026-76128.md): eCommerce Product Catalog \<= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4)
- [CVE-2026-57360](https://cve.now/CVE-2026-57360.md): WordPress eCommerce Product Catalog plugin \<= 3.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-52693](https://cve.now/CVE-2026-52693.md): WordPress eCommerce Product Catalog plugin \<= 3.5.5 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-62061](https://cve.now/CVE-2025-62061.md): WordPress Product Catalog Simple plugin \<= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2025-58992](https://cve.now/CVE-2025-58992.md): WordPress Product Catalog Simple Plugin \<= 1.8.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-49331](https://cve.now/CVE-2025-49331.md): WordPress eCommerce Product Catalog plugin \<= 3.4.3 - PHP Object Injection Vulnerability (CVSS 7.2)
- [CVE-2025-49305](https://cve.now/CVE-2025-49305.md): WordPress Product Catalog Simple plugin \<= 1.8.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-1405](https://cve.now/CVE-2025-1405.md): Product Catalog Simple \<= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show\_products Shortcode (CVSS 6.4)
- [CVE-2024-12771](https://cve.now/CVE-2024-12771.md): eCommerce Product Catalog Plugin for WordPress \<= 3.3.43 - Cross-Site Request Forgery to Password Reset (CVSS 8.8)
- [CVE-2024-32822](https://cve.now/CVE-2024-32822.md): WordPress Reviews Plus plugin \<= 1.3.4 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-32558](https://cve.now/CVE-2024-32558.md): WordPress eCommerce Product Catalog plugin \<= 3.3.32 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-32437](https://cve.now/CVE-2024-32437.md): WordPress eCommerce Product Catalog plugin \<= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2023-51688](https://cve.now/CVE-2023-51688.md): WordPress eCommerce Product Catalog Plugin \<= 3.3.26 is vulnerable to Sensitive Data Exposure (CVSS 5.3)
- [CVE-2023-51687](https://cve.now/CVE-2023-51687.md): WordPress Product Catalog Simple Plugin \<= 1.7.6 is vulnerable to Sensitive Data Exposure (CVSS 5.3)
- [CVE-2023-47839](https://cve.now/CVE-2023-47839.md): WordPress eCommerce Product Catalog Plugin \<= 3.3.26 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5)
- [CVE-2020-36743](https://cve.now/CVE-2020-36743.md): Product Catalog Simple \<= 1.5.13 - Cross-Site Request Forgery Bypass (CVSS 4.3)
- [CVE-2021-4392](https://cve.now/CVE-2021-4392.md): eCommerce Product Catalog Plugin for WordPress \<= 2.9.43 - Cross-Site Request Forgery Bypass (CVSS 4.3)
- [CVE-2021-4393](https://cve.now/CVE-2021-4393.md): eCommerce Product Catalog Plugin for WordPress \<= 3.0.17 - Cross-Site Request Forgery Bypass (CVSS 4.3)
- [CVE-2023-29388](https://cve.now/CVE-2023-29388.md): WordPress Product Catalog Simple Plugin \<= 1.6.17 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-25049](https://cve.now/CVE-2023-25049.md): WordPress eCommerce Product Catalog Plugin \<= 3.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-1470](https://cve.now/CVE-2023-1470.md): eCommerce Product Catalog plugin for WordPress \<= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/implecode
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.