What’s Vulnerable › Products

impleCode eCommerce Product Catalog vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your impleCode eCommerce Product Catalog version is affected

Latest impleCode eCommerce Product Catalog vulnerabilities

• CVE-2026-105056 — WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-96344 — WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2026-76128 — eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (CVSS 6.4)
• CVE-2026-57360 — WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-52693 — WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2025-49331 — WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability (CVSS 7.2)
• CVE-2024-12771 — eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset (CVSS 8.8)
• CVE-2024-32558 — WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-32437 — WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2023-51688 — WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure (CVSS 7.5)
• CVE-2023-5979 — eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF (CVSS 6.5)
• CVE-2023-47839 — WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2021-4393 — eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass (CVSS 4.3)
• CVE-2021-4392 — eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass (CVSS 4.3)
• CVE-2023-25049 — WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-1470 — eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2021-24875 — eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting (CVSS 6.1)