Skip to content
OpenAdvisories

Vendor

WPFactory

51 known vulnerabilities.

Products

Wishlist for WooCommerce 4 Products, Order & Customers Export for WooCommerce 3 Advanced WooCommerce Product Sales Reporting 3 EAN for WooCommerce 3 Cost of Goods for WooCommerce 3 Free Shipping Bar: Amount Left for Free Shipping for WooCommerce 2 Back Button Widget 2 Adverts 2 Product XML Feed Manager for WooCommerce 2 Min Max Step Quantity Limits Manager for WooCommerce 2 Helpdesk Support Ticket System for WooCommerce 2 Additional Custom Product Tabs for WooCommerce 2 Product Notes Tab & Private Admin Notes for WooCommerce 1 Sitewide Discount for WooCommerce: Apply Discount to All Products 1 Product Filter by WBW 1 Email Verification for WooCommerce 1 Slugs Manager 1 Maximum Products per User for WooCommerce 1 Product Excel Import Export & Bulk Edit for WooCommerce 1 Scheduled & Automatic Order Status Controller for WooCommerce 1 EU/UK VAT Manager for WooCommerce 1 Additional Custom Emails & Recipients for WooCommerce 1 Quantity Dynamic Pricing & Bulk Discounts for WooCommerce 1 Download Plugins and Themes from Dashboard 1 Change Add to Cart Button Text for WooCommerce 1 WPFactory Helper 1 WP Currency Exchange Rates 1 Awesome Shortcodes 1 CRM ERP Business Solution 1 Custom CSS, JS & PHP 1 Coupons & Add to Cart by URL Links for WooCommerce 1 Custom Checkout Fields for WooCommerce 1 MSRP (RRP) Pricing for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-112866 Public exploit Scanner template

    WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection.This issue affects Product Filter by WBW: from n/a through 3.4.6.

    WPFactory Product Filter by WBW
  • Critical 9.3
    CVE-2026-24993

    WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Blind SQL Injection.This issue affects Advanced …

    WPFactory Advanced WooCommerce Product Sales Reporting Web / CMS
  • Critical 9.9
    CVE-2025-49887

    WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in WPFactory Product XML Feed Manager for WooCommerce product-xml-feeds-for-woocommerce allows Remote Code Inclusion.This issue affects Product XML Feed Manager for WooCommerce: from n/a …

    WPFactory Product XML Feed Manager for WooCommerce Web / CMS
  • Critical 9.6
    CVE-2025-39601 Public exploit

    WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1.

    WPFactory Custom CSS, JS & PHP
  • Critical 9.3
    CVE-2025-31553

    WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows SQL Injection.This issue affects Advanced WooCom…

    WPFactory Advanced WooCommerce Product Sales Reporting Web / CMS
  • Critical 9.3
    CVE-2024-49305

    WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: …

    WPFactory Email Verification for WooCommerce Web / CMS