CVEs we hold for Wpfactory
Records whose assigning authority named Wpfactory as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-39437WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS)…WPFactory Min Max Step Quantity Limits Manager for…
CVE-2026-24993WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerabilityWPFactory Advanced WooCommerce Product Sales Reporting
CVE-2026-24992WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerabilityWPFactory Advanced WooCommerce Product Sales Reporting
CVE-2026-23977WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerabilityWPFactory Helpdesk Support Ticket System for WooCommerce
CVE-2025-69334WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerabilityWPFactory Wishlist for WooCommerce
CVE-2025-68528WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS)…WPFactory Free Shipping Bar: Amount Left for Free Shipping…
CVE-2025-62096WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityWPFactory Maximum Products per User for WooCommerce
CVE-2025-58985WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) VulnerabilityWPFactory Additional Custom Product Tabs for WooCommerce
CVE-2025-57972WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerabilityWPFactory Helpdesk Support Ticket System for WooCommerce
CVE-2025-57911WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) VulnerabilityWPFactory Adverts
CVE-2025-49987WordPress CRM ERP Business Solution plugin <= 1.13 - Broken Access Control VulnerabilityWPFactory CRM ERP Business Solution
CVE-2025-49887WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) VulnerabilityWPFactory Product XML Feed Manager for WooCommerce
CVE-2025-49510WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF)…WPFactory Min Max Step Quantity Limits Manager for…
CVE-2025-49319WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control VulnerabilityWPFactory Wishlist for WooCommerce
CVE-2025-48254WordPress Change Add to Cart Button Text for WooCommerce plugin <= 2.2.2 - Cross Site Scripting (XSS) VulnerabilityWPFactory Change Add to Cart Button Text for WooCommerce
CVE-2025-48253WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.6 - Cross Site Scripting (XSS)…WPFactory Free Shipping Bar: Amount Left for Free Shipping…
CVE-2025-48252WordPress Back Button Widget plugin <= 1.6.8 - Cross Site Scripting (XSS) VulnerabilityWPFactory Back Button Widget
CVE-2025-48251WordPress Additional Custom Emails & Recipients for WooCommerce plugin <= 3.5.1 - Cross Site Scripting (XSS)…WPFactory Additional Custom Emails & Recipients for…
CVE-2025-48250WordPress Coupons & Add to Cart by URL Links for WooCommerce plugin <= 1.7.7 - Cross Site Scripting (XSS) VulnerabilityWPFactory Coupons & Add to Cart by URL Links for WooCommerce
CVE-2025-48249WordPress EAN for WooCommerce plugin <= 5.4.6 - Cross Site Scripting (XSS) VulnerabilityWPFactory EAN for WooCommerce
CVE-2025-48248WordPress Sitewide Discount for WooCommerce: Apply Discount to All Products plugin <= 2.2.1 - Cross Site Scripting…WPFactory Sitewide Discount for WooCommerce: Apply Discount…
CVE-2025-48240WordPress Cost of Goods for WooCommerce plugin <= 3.7.0 - Cross Site Scripting (XSS) VulnerabilityWPFactory Cost of Goods for WooCommerce
CVE-2025-48239WordPress Product Notes Tab & Private Admin Notes for WooCommerce plugin <= 3.1.0 - Cross Site Scripting (XSS)…WPFactory Product Notes Tab & Private Admin Notes for…
CVE-2025-48237WordPress Wishlist for WooCommerce plugin <= 3.2.2 - Cross Site Scripting (XSS) VulnerabilityWPFactory Wishlist for WooCommerce
CVE-2025-47504WordPress Custom Checkout Fields for WooCommerce plugin <= 1.8.3 - Cross Site Scripting (XSS) VulnerabilityWPFactory Custom Checkout Fields for WooCommerce
CVE-2025-39601WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerabilityWPFactory Custom CSS, JS & PHP
CVE-2025-32674WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS)…WPFactory Product Excel Import Export & Bulk Edit for…
CVE-2025-32552WordPress MSRP (RRP) Pricing for WooCommerce Plugin <= 1.8.1 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory MSRP (RRP) Pricing for WooCommerce
CVE-2025-31848WordPress WordPress Adverts Plugin plugin <= 1.4 - Broken Access Control vulnerabilityWPFactory Adverts
CVE-2025-31598WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS)…WPFactory Quantity Dynamic Pricing & Bulk Discounts for…
CVE-2025-31553WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.1 - SQL Injection vulnerabilityWPFactory Advanced WooCommerce Product Sales Reporting
CVE-2025-30959WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control VulnerabilityWPFactory Product XML Feed Manager for WooCommerce
CVE-2025-30781WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection VulnerabilityWPFactory Scheduled & Automatic Order Status Controller for…
CVE-2025-26749WordPress Additional Custom Product Tabs for WooCommerce plugin <= 1.7.0 - Cross Site Scripting (XSS) vulnerabilityWPFactory Additional Custom Product Tabs for WooCommerce
CVE-2025-22673WordPress EAN Barcode Generator <= 5.3.5 - Broken Access Control vulnerabilityWPFactory EAN for WooCommerce
CVE-2024-56228WordPress Wishlist for WooCommerce: Multi Wishlists Per Customer plugin <= 3.1.2 - Reflected Cross Site Scripting (XSS)…WPFactory Wishlist for WooCommerce
CVE-2024-54332WordPress WP Currency Exchange Rates plugin <= 1.2.0 - CSRF to Stored XSS vulnerabilityWPFactory WP Currency Exchange Rates
CVE-2024-54209WordPress Awesome Shortcodes plugin <= 1.7.2 - Reflected Cross Site Scripting (XSS) vulnerabilityWPFactory Awesome Shortcodes
CVE-2024-49305WordPress Customer Email Verification for WooCommerce plugin <= 2.8.10 - SQL Injection vulnerabilityWPFactory Email Verification for WooCommerce
CVE-2024-44061WordPress EU/UK VAT Manager for WooCommerce plugin <= 2.12.14 - CSRF to Cross Site Scripting (XSS) vulnerabilityWPFactory EU/UK VAT Manager for WooCommerce
CVE-2024-43127WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.11 - Reflected Cross Site Scripting (XSS)…WPFactory Products, Order & Customers Export for WooCommerce
CVE-2024-34370WordPress EAN for WooCommerce plugin <= 4.8.9 - Arbitrary Option Update to Privilege Escalation vulnerabilityWPFactory EAN for WooCommerce
CVE-2024-31276WordPress Products, Order & Customers Export for WooCommerce plugin <= 2.0.8 - Broken Access Control vulnerabilityWPFactory Products, Order & Customers Export for WooCommerce
CVE-2024-30536WordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerabilityWPFactory Slugs Manager
CVE-2023-51399WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)WPFactory Back Button Widget
CVE-2023-47547WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)WPFactory Products, Order & Customers Export for WooCommerce
CVE-2023-36689WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)WPFactory Helper
CVE-2023-23868WordPress Cost of Goods for WooCommerce plugin <= 2.8.6 - Broken Access Control vulnerabilityWPFactory Cost of Goods for WooCommerce
49 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.