What’s Vulnerable › Products

WPFactory EAN for WooCommerce vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WPFactory EAN for WooCommerce version is affected

Latest WPFactory EAN for WooCommerce vulnerabilities

• CVE-2025-48249 — WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
• CVE-2025-22673 — WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-34370 — WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability (CVSS 7.2)
• CVE-2023-6897 — EAN for WooCommerce <= 4.9.2 - Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode (CVSS 4.3)
• CVE-2023-6892 — EAN for WooCommerce <= 4.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode (CVSS 5.4)
• CVE-2023-0062 — EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS (CVSS 5.4)