| CVE-2026-116851 |
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions
|
7.1
High
|
Oct 30, 2026 |
| CVE-2026-115596 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
|
7.1
High
|
Oct 28, 2026 |
| CVE-2026-105056 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
|
6.5
Medium
|
Oct 5, 2026 |
| CVE-2026-96344 |
Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions
|
7.2
High
|
Sep 30, 2026 |
| CVE-2026-76128 |
The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode…
|
6.4
Medium
|
Aug 25, 2026 |
| CVE-2026-57360 |
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions
|
7.1
High
|
Jul 2, 2026 |
| CVE-2026-52693 |
Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions
|
9.3
Critical
|
Jun 15, 2026 |
| CVE-2025-49331 |
Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog…
|
7.2
High
|
Jun 17, 2025 |
| CVE-2024-32558 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode…
|
7.1
High
|
Apr 18, 2024 |
| CVE-2024-32437 |
Cross-Site Request Forgery (CSRF) vulnerability in impleCode eCommerce Product Catalog.This issue affects eCommerce…
|
4.3
Medium
|
Apr 15, 2024 |