Realmag777 vulnerabilities
132 CVEs and advisories name Realmag777 as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-120579Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via…
- CVE-2026-120560Active Woot Products Tables for WooCommerce. 100% FREE <= 2.1.5 - Unauthenticated File Deletion via 'wp_columns_actions' and 'table_id'…
- CVE-2026-110776MDTF <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting via 'vars' Parameter
- CVE-2026-116401WordPress HUSKY plugin <= 1.4.6 - Broken Access Control vulnerability
- CVE-2026-115947WordPress HUSKY plugin <= 1.4.6 - Sensitive Data Exposure vulnerability
- CVE-2026-107646HUSKY <= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof_tm_data' Localized Script
- CVE-2026-95526WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability
- CVE-2026-92969HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
- CVE-2026-18562HUSKY <= 1.4.3 - Reflected Cross-Site Scripting
- CVE-2026-84816WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-66436WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
- CVE-2026-18881TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter
- CVE-2026-57409WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57320WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57319WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39574WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability
- CVE-2026-9241FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter
- CVE-2026-42761WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability
- CVE-2026-42755WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability
- CVE-2026-42733WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-42727WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability
- CVE-2026-4094FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion
- CVE-2026-45213WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability
- CVE-2026-1672BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification
- CVE-2026-1673BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion
- CVE-2026-39501WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability
- CVE-2026-39497WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability
- CVE-2026-3513TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
- CVE-2026-32458WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability
- CVE-2026-32455WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability