Skip to content
OpenAdvisories

Vendor

WPFactory

51 known vulnerabilities.

Products

Wishlist for WooCommerce 4 Products, Order & Customers Export for WooCommerce 3 Advanced WooCommerce Product Sales Reporting 3 EAN for WooCommerce 3 Cost of Goods for WooCommerce 3 Free Shipping Bar: Amount Left for Free Shipping for WooCommerce 2 Back Button Widget 2 Adverts 2 Product XML Feed Manager for WooCommerce 2 Min Max Step Quantity Limits Manager for WooCommerce 2 Helpdesk Support Ticket System for WooCommerce 2 Additional Custom Product Tabs for WooCommerce 2 Product Notes Tab & Private Admin Notes for WooCommerce 1 Sitewide Discount for WooCommerce: Apply Discount to All Products 1 Product Filter by WBW 1 Email Verification for WooCommerce 1 Slugs Manager 1 Maximum Products per User for WooCommerce 1 Product Excel Import Export & Bulk Edit for WooCommerce 1 Scheduled & Automatic Order Status Controller for WooCommerce 1 EU/UK VAT Manager for WooCommerce 1 Additional Custom Emails & Recipients for WooCommerce 1 Quantity Dynamic Pricing & Bulk Discounts for WooCommerce 1 Download Plugins and Themes from Dashboard 1 Change Add to Cart Button Text for WooCommerce 1 WPFactory Helper 1 WP Currency Exchange Rates 1 Awesome Shortcodes 1 CRM ERP Business Solution 1 Custom CSS, JS & PHP 1 Coupons & Add to Cart by URL Links for WooCommerce 1 Custom Checkout Fields for WooCommerce 1 MSRP (RRP) Pricing for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.2
    CVE-2026-93771

    WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability

    Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.

    WPFactory Cost of Goods for WooCommerce Web / CMS
  • High 7.1
    CVE-2026-39437

    WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Min Max Step Quantity Limits Manager for WooCommerce <= 5.2.2 versions.

    WPFactory Min Max Step Quantity Limits Manager for WooCommerce Web / CMS
  • High 7.5
    CVE-2026-23977

    WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for…

    WPFactory Helpdesk Support Ticket System for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-32552

    WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory MSRP (RRP) Pricing for WooCommerce msrp-for-woocommerce allows Reflected XSS.This issue affects MSRP (RRP) Pricing for WooCommerce: from n/a throug…

    WPFactory MSRP (RRP) Pricing for WooCommerce Web / CMS
  • High 7.1
    CVE-2025-32674

    WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Product Excel Import Export & Bulk Edit for WooCommerce webd-woocommerce-product-excel-importer-bulk-edit allows Reflected XSS.This issue affects P…

    WPFactory Product Excel Import Export & Bulk Edit for WooCommerce Web / CMS
  • High 7.1
    CVE-2024-56228

    WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce.This issue affects Wishlist for WooCommerce: from n/a through <= 3.1.2.

    WPFactory Wishlist for WooCommerce Web / CMS
  • High 7.1
    CVE-2024-54332

    WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPFactory WP Currency Exchange Rates wp-currency-exchange-rates allows Stored XSS.This issue affects WP Currency Exchange Rates: from n/a through <= 1.2.0.

    WPFactory WP Currency Exchange Rates
  • High 7.1
    CVE-2024-54209

    WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Awesome Shortcodes awesome-shortcodes allows Reflected XSS.This issue affects Awesome Shortcodes: from n/a through <= 1.7.2.

    WPFactory Awesome Shortcodes
  • High 7.1
    CVE-2024-44061

    WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through <= 2.12.14.

    WPFactory EU/UK VAT Manager for WooCommerce Web / CMS
  • High 7.1
    CVE-2024-43127

    WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerc…

    WPFactory Products, Order & Customers Export for WooCommerce Web / CMS
  • High 7.2
    CVE-2024-34370 Public exploit

    WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9.

    WPFactory EAN for WooCommerce Web / CMS
  • High 7.1
    CVE-2023-47547

    WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommerce plugin <= 2.0.7 versions.

    WPFactory Products, Order & Customers Export for WooCommerce Web / CMS
  • High 7.1
    CVE-2023-36689

    WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory WPFactory Helper plugin <= 1.5.2 versions.

    WPFactory WPFactory Helper