Skip to content
OpenAdvisories

Vendor

WPFactory

51 known vulnerabilities.

Products

Wishlist for WooCommerce 4 Products, Order & Customers Export for WooCommerce 3 Advanced WooCommerce Product Sales Reporting 3 EAN for WooCommerce 3 Cost of Goods for WooCommerce 3 Free Shipping Bar: Amount Left for Free Shipping for WooCommerce 2 Back Button Widget 2 Adverts 2 Product XML Feed Manager for WooCommerce 2 Min Max Step Quantity Limits Manager for WooCommerce 2 Helpdesk Support Ticket System for WooCommerce 2 Additional Custom Product Tabs for WooCommerce 2 Product Notes Tab & Private Admin Notes for WooCommerce 1 Sitewide Discount for WooCommerce: Apply Discount to All Products 1 Product Filter by WBW 1 Email Verification for WooCommerce 1 Slugs Manager 1 Maximum Products per User for WooCommerce 1 Product Excel Import Export & Bulk Edit for WooCommerce 1 Scheduled & Automatic Order Status Controller for WooCommerce 1 EU/UK VAT Manager for WooCommerce 1 Additional Custom Emails & Recipients for WooCommerce 1 Quantity Dynamic Pricing & Bulk Discounts for WooCommerce 1 Download Plugins and Themes from Dashboard 1 Change Add to Cart Button Text for WooCommerce 1 WPFactory Helper 1 WP Currency Exchange Rates 1 Awesome Shortcodes 1 CRM ERP Business Solution 1 Custom CSS, JS & PHP 1 Coupons & Add to Cart by URL Links for WooCommerce 1 Custom Checkout Fields for WooCommerce 1 MSRP (RRP) Pricing for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • High 7.1
    CVE-2024-54209

    WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Awesome Shortcodes awesome-shortcodes allows Reflected XSS.This issue affects Awesome Shortcodes: from n/a through <= 1.7.2.

    WPFactory Awesome Shortcodes
  • High 7.1
    CVE-2024-44061

    WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory EU/UK VAT Manager for WooCommerce eu-vat-for-woocommerce.This issue affects EU/UK VAT Manager for WooCommerce: from n/a through <= 2.12.14.

    WPFactory EU/UK VAT Manager for WooCommerce Web / CMS
  • Critical 9.3
    CVE-2024-49305

    WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Email Verification for WooCommerce emails-verification-for-woocommerce allows SQL Injection.This issue affects Email Verification for WooCommerce: …

    WPFactory Email Verification for WooCommerce Web / CMS
  • High 7.1
    CVE-2024-43127

    WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory Products, Order & Customers Export for WooCommerce allows Reflected XSS.This issue affects Products, Order & Customers Export for WooCommerc…

    WPFactory Products, Order & Customers Export for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-31276

    WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPFactory Products, Order & Customers Export for WooCommerce.This issue affects Products, Order & Customers Export for WooCommerce: from n/a through 2.0.8.

    WPFactory Products, Order & Customers Export for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2024-35162

    Path traversal vulnerability exists in Download Plugins and Themes from Dashboard versions prior to 1.8.6. If this vuln…

    WPFactory Download Plugins and Themes from Dashboard
  • High 7.2
    CVE-2024-34370 Public exploit

    WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9.

    WPFactory EAN for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-30536

    WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Slugs Manager.This issue affects Slugs Manager: from n/a through 2.6.7.

    WPFactory Slugs Manager
  • Medium 6.5
    CVE-2023-51399

    WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Back Button Widget allows Stored XSS.This issue affects Back Button Widget: from n/a through 1.6.3.

    WPFactory Back Button Widget
  • High 7.1
    CVE-2023-47547

    WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommerce plugin <= 2.0.7 versions.

    WPFactory Products, Order & Customers Export for WooCommerce Web / CMS
  • High 7.1
    CVE-2023-36689

    WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory WPFactory Helper plugin <= 1.5.2 versions.

    WPFactory WPFactory Helper