Wpfactory vulnerabilities
51 CVEs and advisories name Wpfactory as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-39601WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability
- CVE-2025-26749WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-31553WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability
- CVE-2025-31848WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerability
- CVE-2025-31598WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2025-22673WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability
- CVE-2025-30781WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability
- CVE-2024-56228WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-54332WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability
- CVE-2023-23868WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerability
- CVE-2024-54209WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-44061WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability
- CVE-2024-49305WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability
- CVE-2024-43127WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-31276WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability
- CVE-2024-35162Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6.
- CVE-2024-34370WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability
- CVE-2024-30536WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-51399WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47547WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-36689WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)