Realmag777 vulnerabilities
132 CVEs and advisories name Realmag777 as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-32450WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-67990WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-69316WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-13110HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'
- CVE-2025-13109HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query'
- CVE-2025-60244WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability
- CVE-2025-11735HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter
- CVE-2025-62964WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability
- CVE-2025-62069WordPress MDTF plugin <= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-49907WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability
- CVE-2025-57889WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability
- CVE-2025-54707WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability
- CVE-2025-52732WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability
- CVE-2025-5143TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
- CVE-2025-52708WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability
- CVE-2025-48266WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-3748Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode
- CVE-2025-32592WordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26903WordPress InPost Gallery plugin <= 2.1.4.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-32569WordPress TableOn plugin <= 1.0.4.3 - PHP Object Injection vulnerability
- CVE-2025-32218WordPress TableOn plugin <= 1.0.5.1 - Broken Access Control vulnerability
- CVE-2025-26890WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability
- CVE-2025-1514Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call
- CVE-2025-2169WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2025-1661HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion
- CVE-2025-0864Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting
- CVE-2025-26775WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-24605WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability
- CVE-2024-13340MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-12030MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection