# cve.now: Realmag777

The newest entries naming Realmag777 as an affected vendor (up to 200), of 132 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-120579](https://cve.now/CVE-2026-120579.md): Active Woot Products Tables for WooCommerce. 100% FREE \<= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via… (CVSS 6.4)
- [CVE-2026-120560](https://cve.now/CVE-2026-120560.md): Active Woot Products Tables for WooCommerce. 100% FREE \<= 2.1.5 - Unauthenticated File Deletion via 'wp\_columns\_actions' and 'table\_id'… (CVSS 6.5)
- [CVE-2026-110776](https://cve.now/CVE-2026-110776.md): MDTF \<= 1.4.1 - Unauthenticated Stored Cross-Site Scripting via 'vars' Parameter (CVSS 7.2)
- [CVE-2026-116401](https://cve.now/CVE-2026-116401.md): WordPress HUSKY plugin \<= 1.4.6 - Broken Access Control vulnerability (CVSS 7.5)
- [CVE-2026-115947](https://cve.now/CVE-2026-115947.md): WordPress HUSKY plugin \<= 1.4.6 - Sensitive Data Exposure vulnerability (CVSS 6.5)
- [CVE-2026-107646](https://cve.now/CVE-2026-107646.md): HUSKY \<= 1.4.5 - Unauthenticated Sensitive Information Exposure in 'woof\_tm\_data' Localized Script (CVSS 5.3)
- [CVE-2026-95526](https://cve.now/CVE-2026-95526.md): WordPress BEAR plugin \<= 1.2.2 - Broken Access Control vulnerability (CVSS 7.3)
- [CVE-2026-92969](https://cve.now/CVE-2026-92969.md): HUSKY \<= 1.4.4 - Unauthenticated Local File Inclusion via 'custom\_tpl' Shortcode Attribute via 'woof\_draw\_products' AJAX (CVSS 8.1)
- [CVE-2026-18562](https://cve.now/CVE-2026-18562.md): HUSKY \<= 1.4.3 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2026-84816](https://cve.now/CVE-2026-84816.md): WordPress WPCS plugin \<= 1.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-66436](https://cve.now/CVE-2026-66436.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.1.1 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-18881](https://cve.now/CVE-2026-18881.md): TableOn \<= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment\_count' Filter Parameter (CVSS 7.5)
- [CVE-2026-57409](https://cve.now/CVE-2026-57409.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.1.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-57320](https://cve.now/CVE-2026-57320.md): WordPress BEAR plugin \<= 1.1.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-57319](https://cve.now/CVE-2026-57319.md): WordPress FOX plugin \<= 1.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-39574](https://cve.now/CVE-2026-39574.md): WordPress InPost Gallery plugin \<= 2.1.4.6 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-9241](https://cve.now/CVE-2026-9241.md): FOX – Currency Switcher Professional for WooCommerce \<= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc\_order\_user\_roles' Parameter (CVSS 4.3)
- [CVE-2026-42761](https://cve.now/CVE-2026-42761.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.0.9 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-42755](https://cve.now/CVE-2026-42755.md): WordPress TableOn plugin \<= 1.0.5.1 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-42733](https://cve.now/CVE-2026-42733.md): WordPress WPCS plugin \<= 1.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-42727](https://cve.now/CVE-2026-42727.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.0.8 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-4094](https://cve.now/CVE-2026-4094.md): FOX – Currency Switcher Professional for WooCommerce \<= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion (CVSS 8.1)
- [CVE-2026-45213](https://cve.now/CVE-2026-45213.md): WordPress BEAR plugin \<= 1.1.7.1 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2026-1672](https://cve.now/CVE-2026-1672.md): BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net \<= 1.1.5 - Cross-Site Request Forgery to Product Data Modification (CVSS 6.5)
- [CVE-2026-1673](https://cve.now/CVE-2026-1673.md): BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net \<= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion (CVSS 4.3)
- [CVE-2026-39501](https://cve.now/CVE-2026-39501.md): WordPress FOX plugin \<= 1.4.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-39497](https://cve.now/CVE-2026-39497.md): WordPress FOX plugin \<= 1.4.5 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2026-3513](https://cve.now/CVE-2026-3513.md): TableOn – WordPress Posts Table Filterable \<= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute (CVSS 6.4)
- [CVE-2026-32458](https://cve.now/CVE-2026-32458.md): WordPress WOLF plugin \<= 1.0.8.7 - SQL Injection vulnerability (CVSS 7.6)
- [CVE-2026-32455](https://cve.now/CVE-2026-32455.md): WordPress MDTF plugin \<= 1.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-32450](https://cve.now/CVE-2026-32450.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.0.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-67990](https://cve.now/CVE-2025-67990.md): WordPress GMap Targeting plugin \<= 1.1.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-69316](https://cve.now/CVE-2025-69316.md): WordPress TableOn plugin \<= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-13110](https://cve.now/CVE-2025-13110.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof\_add\_subscr' (CVSS 4.3)
- [CVE-2025-13109](https://cve.now/CVE-2025-13109.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof\_add\_query/woof\_remove\_query' (CVSS 4.3)
- [CVE-2025-60244](https://cve.now/CVE-2025-60244.md): WordPress TableOn plugin \<= 1.0.5.1 - Content Injection vulnerability (CVSS 7.1)
- [CVE-2025-11735](https://cve.now/CVE-2025-11735.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.7.1 - Unauthenticated SQL Injection via \`phrase\` Parameter (CVSS 7.5)
- [CVE-2025-62964](https://cve.now/CVE-2025-62964.md): WordPress MDTF plugin \<= 1.3.6 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-62069](https://cve.now/CVE-2025-62069.md): WordPress MDTF plugin \<= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-49907](https://cve.now/CVE-2025-49907.md): WordPress MDTF plugin \<= 1.3.3.9 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-57889](https://cve.now/CVE-2025-57889.md): WordPress InPost Gallery Plugin \<= 2.1.4.5 - Local File Inclusion Vulnerability (CVSS 7.5)
- [CVE-2025-54707](https://cve.now/CVE-2025-54707.md): WordPress MDTF Plugin \<= 1.3.3.7 - SQL Injection Vulnerability (CVSS 9.3)
- [CVE-2025-52732](https://cve.now/CVE-2025-52732.md): WordPress Google Map Targeting Plugin \<= 1.1.6 - Local File Inclusion Vulnerability (CVSS 8.8)
- [CVE-2025-5143](https://cve.now/CVE-2025-5143.md): TableOn – WordPress Posts Table Filterable \<= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon\_popup\_iframe\_button Shortcode (CVSS 6.4)
- [CVE-2025-52708](https://cve.now/CVE-2025-52708.md): WordPress HUSKY plugin \<= 1.3.7 - Local File Inclusion Vulnerability (CVSS 7.5)
- [CVE-2025-48266](https://cve.now/CVE-2025-48266.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-3748](https://cve.now/CVE-2025-3748.md): Taxonomy Chain Menu \<= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn\_chain\_menu Shortcode (CVSS 6.4)
- [CVE-2025-32592](https://cve.now/CVE-2025-32592.md): WordPress TableOn Plugin \<= 1.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2025-26903](https://cve.now/CVE-2025-26903.md): WordPress InPost Gallery plugin \<= 2.1.4.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2025-32569](https://cve.now/CVE-2025-32569.md): WordPress TableOn plugin \<= 1.0.4.3 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-32218](https://cve.now/CVE-2025-32218.md): WordPress TableOn plugin \<= 1.0.5.1 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2025-26890](https://cve.now/CVE-2025-26890.md): WordPress HUSKY plugin \<= 1.3.6.4 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2025-1514](https://cve.now/CVE-2025-1514.md): Active Products Tables for WooCommerce \<= 1.0.6.7 - Unauthenticated Arbitrary Filter Call (CVSS 7.3)
- [CVE-2025-2169](https://cve.now/CVE-2025-2169.md): WPCS – WordPress Currency Switcher Professional \<= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
- [CVE-2025-1661](https://cve.now/CVE-2025-1661.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.6.5 - Unauthenticated Local File Inclusion (CVSS 9.8)
- [CVE-2025-0864](https://cve.now/CVE-2025-0864.md): Active Products Tables for WooCommerce. Use constructor to create tables \<= 1.0.6.6 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2025-26775](https://cve.now/CVE-2025-26775.md): WordPress BEAR Plugin \<= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2025-24605](https://cve.now/CVE-2025-24605.md): WordPress WOLF plugin \<= 1.0.8.5 - Path Traversal vulnerability (CVSS 7.5)
- [CVE-2024-13340](https://cve.now/CVE-2024-13340.md): MDTF – Meta Data and Taxonomies Filter \<= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-12030](https://cve.now/CVE-2024-12030.md): MDTF – Meta Data and Taxonomies Filter \<= 1.3.3.5 - Authenticated (Contributor+) SQL Injection (CVSS 6.5)
- [CVE-2023-40334](https://cve.now/CVE-2023-40334.md): WordPress HUSKY plugin \<= 1.3.4.2 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-10959](https://cve.now/CVE-2024-10959.md): Active Products Tables for WooCommerce. Use constructor to create tables \<= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot\_get\_smth (CVSS 7.3)
- [CVE-2024-11002](https://cve.now/CVE-2024-11002.md): InPost Gallery \<= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost\_gallery\_get\_shortcode\_template (CVSS 6.3)
- [CVE-2024-11400](https://cve.now/CVE-2024-11400.md): HUSKY – Products Filter for WooCommerce \<= 1.3.6.3 - Reflected Cross-Site Scripting via really\_curr\_tax Parameter (CVSS 6.1)
- [CVE-2024-52396](https://cve.now/CVE-2024-52396.md): WordPress WOLF plugin \<= 1.0.8.3 - CSV Limited Path Traversal vulnerability (CVSS 4.9)
- [CVE-2024-10640](https://cve.now/CVE-2024-10640.md): The FOX – Currency Switcher Professional for WooCommerce \<= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
- [CVE-2024-10168](https://cve.now/CVE-2024-10168.md): Active Products Tables for WooCommerce. Use constructor to create tables \<= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot\_button Shortcode (CVSS 6.4)
- [CVE-2024-50451](https://cve.now/CVE-2024-50451.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.3.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-50450](https://cve.now/CVE-2024-50450.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.3.4 - Bypass Vulnerability vulnerability (CVSS 7.3)
- [CVE-2024-7491](https://cve.now/CVE-2024-7491.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe (CVSS 5.3)
- [CVE-2024-8623](https://cve.now/CVE-2024-8623.md): MDTF – Meta Data and Taxonomies Filter \<= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
- [CVE-2024-8624](https://cve.now/CVE-2024-8624.md): MDTF – Meta Data and Taxonomies Filter \<= 1.3.3.3 - Authenticated (Contributor+) SQL Injection (CVSS 9.9)
- [CVE-2024-8271](https://cve.now/CVE-2024-8271.md): FOX – Currency Switcher Professional for WooCommerce \<= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
- [CVE-2024-43121](https://cve.now/CVE-2024-43121.md): WordPress HUSKY plugin \<= 1.3.6.1 - Privilege Escalation vulnerability (CVSS 9.1)
- [CVE-2024-6457](https://cve.now/CVE-2024-6457.md): HUSKY - Products Filter Professional for WooCommerce \<= 1.3.6 - Unauthenticated Time-Based SQL Injection (CVSS 9.8)
- [CVE-2024-38700](https://cve.now/CVE-2024-38700.md): WordPress WPCS – WordPress Currency Switcher Professional plugin \<= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability (CVSS 6.5)
- [CVE-2024-32818](https://cve.now/CVE-2024-32818.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.3 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-35730](https://cve.now/CVE-2024-35730.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-5039](https://cve.now/CVE-2024-5039.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- [CVE-2024-34434](https://cve.now/CVE-2024-34434.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability (CVSS 6.5)
- [CVE-2024-34558](https://cve.now/CVE-2024-34558.md): WordPress WOLF plugin \<= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-3734](https://cve.now/CVE-2024-3734.md): FOX – Currency Switcher Professional for WooCommerce \<= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5)
- [CVE-2024-32691](https://cve.now/CVE-2024-32691.md): WordPress Active Products Tables for WooCommerce plugin \<= 1.0.6.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-31430](https://cve.now/CVE-2024-31430.md): Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins (CVSS 4.3)
- [CVE-2024-30462](https://cve.now/CVE-2024-30462.md): WordPress HUSKY plugin \<= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-30463](https://cve.now/CVE-2024-30463.md): WordPress BEAR plugin \<= 1.1.4.3 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-30456](https://cve.now/CVE-2024-30456.md): WordPress WPCS – WordPress Currency Switcher Professional plugin \<=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-30457](https://cve.now/CVE-2024-30457.md): WordPress MDTF plugin \<= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-30458](https://cve.now/CVE-2024-30458.md): WordPress FOX – Currency Switcher Professional for WooCommerce plugin \<= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-3061](https://cve.now/CVE-2024-3061.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion (CVSS 7.2)
- [CVE-2024-30200](https://cve.now/CVE-2024-30200.md): WordPress BEAR plugin \<= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-29763](https://cve.now/CVE-2024-29763.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-29932](https://cve.now/CVE-2024-29932.md): WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin \<= 1.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-29906](https://cve.now/CVE-2024-29906.md): WordPress MDTF – Meta Data and Taxonomies Filter plugin \<= 1.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-24835](https://cve.now/CVE-2024-24835.md): WordPress BEAR plugin \<= 1.1.4 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2023-50861](https://cve.now/CVE-2023-50861.md): WordPress HUSKY plugin \<= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-1795](https://cve.now/CVE-2024-1795.md): HUSKY – Products Filter for WooCommerce Professional \<= 1.3.5.2 - Authenticated (Contributor+) SQL Injection (CVSS 8.8)
- [CVE-2024-1796](https://cve.now/CVE-2024-1796.md): HUSKY – Products Filter for WooCommerce Professional \<= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- [CVE-2023-51480](https://cve.now/CVE-2023-51480.md): WordPress Active Products Tables for WooCommerce Plugin \<= 1.0.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5)
- [CVE-2024-24834](https://cve.now/CVE-2024-24834.md): WordPress BEAR Plugin \<= 1.1.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2024-0790](https://cve.now/CVE-2024-0790.md): WOLF – WordPress Posts Bulk Editor and Manager Professional \<= 1.0.8.1 - Cross-Site Request Forgery (CVSS 5.4)
- [CVE-2024-0796](https://cve.now/CVE-2024-0796.md): Active Products Tables for WooCommerce. Professional products tables for WooCommerce store \<= 1.0.6.1 - Cross-Site Request Forgery (CVSS 4.3)
- [CVE-2024-0791](https://cve.now/CVE-2024-0791.md): WOLF – WordPress Posts Bulk Editor and Manager Professional \<= 1.0.8.1 - Missing Authorization (CVSS 4.3)
- [CVE-2024-0797](https://cve.now/CVE-2024-0797.md): Active Products Tables for WooCommerce. Professional products tables for WooCommerce store \<= 1.0.6.1 - Missing Authorization (CVSS 4.3)
- [CVE-2023-51506](https://cve.now/CVE-2023-51506.md): WordPress WPCS Plugin \<= 1.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.5)
- [CVE-2024-22159](https://cve.now/CVE-2024-22159.md): WordPress WOLF Plugin \<= 1.0.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-6556](https://cve.now/CVE-2023-6556.md): FOX – Currency Switcher Professional for WooCommerce \<= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 5.4)
- [CVE-2023-51505](https://cve.now/CVE-2023-51505.md): WordPress Active Products Tables for WooCommerce Plugin \<= 1.0.6 is vulnerable to PHP Object Injection (CVSS 10.0)
- [CVE-2023-40010](https://cve.now/CVE-2023-40010.md): WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin \<= 1.3.4.2 is vulnerable to SQL Injection (CVSS 9.3)
- [CVE-2023-49834](https://cve.now/CVE-2023-49834.md): WordPress WOOCS – WooCommerce Currency Switcher Plugin \<= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2023-46152](https://cve.now/CVE-2023-46152.md): WordPress WOLF Plugin \<= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-4941](https://cve.now/CVE-2023-4941.md): BEAR \<= 1.1.3.3 - Missing Authorization to Product Manipulation (CVSS 4.3)
- [CVE-2023-4926](https://cve.now/CVE-2023-4926.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion (CVSS 5.4)
- [CVE-2023-4924](https://cve.now/CVE-2023-4924.md): BEAR \<= 1.1.3.3 - Missing Authorization to Product Deletion (CVSS 5.4)
- [CVE-2023-4923](https://cve.now/CVE-2023-4923.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion (CVSS 5.4)
- [CVE-2023-4935](https://cve.now/CVE-2023-4935.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Profile Creation (CVSS 4.3)
- [CVE-2023-4920](https://cve.now/CVE-2023-4920.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 4.3)
- [CVE-2023-4937](https://cve.now/CVE-2023-4937.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation (CVSS 4.3)
- [CVE-2023-4940](https://cve.now/CVE-2023-4940.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation (CVSS 4.3)
- [CVE-2023-4943](https://cve.now/CVE-2023-4943.md): BEAR \<= 1.1.3.3 - Missing Authorization to Product Manipulation (CVSS 4.3)
- [CVE-2023-4942](https://cve.now/CVE-2023-4942.md): BEAR \<= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation (CVSS 4.3)
- [CVE-2023-4938](https://cve.now/CVE-2023-4938.md): BEAR \<= 1.1.3.3 - Missing Authorization to Product Manipulation (CVSS 4.3)
- [CVE-2023-44990](https://cve.now/CVE-2023-44990.md): WordPress WOLF Plugin \<= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-31218](https://cve.now/CVE-2023-31218.md): WordPress WOLF Plugin \<= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2023-34028](https://cve.now/CVE-2023-34028.md): WordPress WOLF Plugin \<= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2023-2555](https://cve.now/CVE-2023-2555.md): WPCS – WordPress Currency Switcher Professional \<= 1.1.9 - Missing Authorization to Custom Drop-Down Currency Switcher Creation (CVSS 4.3)
- [CVE-2023-2557](https://cve.now/CVE-2023-2557.md): WPCS – WordPress Currency Switcher Professional \<= 1.1.9 - Missing Authorization to Arbitrary Custom Drop-Down Currency Switcher Editing (CVSS 4.3)
- [CVE-2023-2558](https://cve.now/CVE-2023-2558.md): WPCS – WordPress Currency Switcher Professional \<= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- [CVE-2023-2556](https://cve.now/CVE-2023-2556.md): WPCS – WordPress Currency Switcher Professional \<= 1.1.9 - Missing Authorization to Arbitrary Custom Drop-Down Currency Switcher Deletion (CVSS 4.3)
- [CVE-2023-33314](https://cve.now/CVE-2023-33314.md): WordPress BEAR Plugin \<= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)
- [CVE-2021-20781](https://cve.now/CVE-2021-20781.md): Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions pri (no CVSS)
- [CVE-2021-20780](https://cve.now/CVE-2021-20780.md): Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack th (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/realmag777
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.