CVE-2026-18562HUSKY <= 1.4.3 - Reflected Cross-Site Scripting Exploitation status Not confirmed Fix YesAffected product H HUSKY – Products Filter for WooCommerce Professional Published 09/11/2026 Severity Medium CVE-2026-84816WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not confirmed Fix YesAffected product W WPCS Published 09/10/2026 Severity High CVE-2026-66436WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 08/13/2026 Severity Critical CVE-2026-18881TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter Exploitation status Not known exploited Fix YesAffected product T TableOn – WordPress Posts Table Filterable Published 08/05/2026 Severity High CVE-2026-57409WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 07/13/2026 Severity High CVE-2026-57320WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product B BEAR Published 06/29/2026 Severity High CVE-2026-57319WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product F FOX Published 06/26/2026 Severity High CVE-2026-39574WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product I InPost Gallery Published 06/16/2026 Severity Critical CVE-2026-9241FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter Exploitation status Not known exploited Fix YesAffected product F FOX – Currency Switcher Professional for WooCommerce Published 05/28/2026 Severity Medium CVE-2026-42761WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 05/27/2026 Severity Critical CVE-2026-42755WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product T TableOn Published 05/27/2026 Severity Critical CVE-2026-42733WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product W WPCS Published 05/27/2026 Severity High CVE-2026-42727WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 05/27/2026 Severity Critical CVE-2026-4094FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion Exploitation status Not known exploited Fix YesAffected product F FOX – Currency Switcher Professional for WooCommerce Published 05/15/2026 Severity High CVE-2026-45213WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product B BEAR Published 05/12/2026 Severity High CVE-2026-1672BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification Exploitation status Not known exploited Fix YesAffected product B BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Published 04/08/2026 Severity Medium CVE-2026-1673BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion Exploitation status Not known exploited Fix YesAffected product B BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Published 04/08/2026 Severity Medium CVE-2026-39501WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product F FOX Published 04/08/2026 Severity Medium CVE-2026-39497WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product F FOX Published 04/08/2026 Severity High CVE-2026-3513TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute Exploitation status Not known exploited Fix YesAffected product T TableOn – WordPress Posts Table Filterable Published 04/08/2026 Severity Medium CVE-2026-32458WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability Exploitation status Not known exploited Fix YesAffected product W WOLF Published 03/13/2026 Severity High CVE-2026-32455WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product M MDTF Published 03/13/2026 Severity Medium CVE-2026-32450WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 03/13/2026 Severity Medium CVE-2025-67990WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product G GMap Targeting Published 02/20/2026 Severity High CVE-2025-69316WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product T TableOn Published 01/22/2026 Severity High CVE-2025-13110HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 12/18/2025 Severity Medium CVE-2025-13109HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 12/03/2025 Severity Medium CVE-2025-60244WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability Exploitation status Not known exploited Fix YesAffected product T TableOn Published 11/06/2025 Severity High CVE-2025-11735HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 10/28/2025 Severity High CVE-2025-62964WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product M MDTF Published 10/27/2025 Severity Medium CVE-2025-62069WordPress MDTF plugin <= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product M MDTF Published 10/22/2025 Severity Medium CVE-2025-49907WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product M MDTF Published 10/22/2025 Severity Medium CVE-2025-57889WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product I InPost Gallery Published 09/05/2025 Severity High CVE-2025-54707WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability Exploitation status Not known exploited Fix YesAffected product M MDTF Published 08/14/2025 Severity Critical CVE-2025-52732WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product G GMap Targeting Published 08/14/2025 Severity High CVE-2025-5143TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode Exploitation status Not known exploited Fix YesAffected product T TableOn – WordPress Posts Table Filterable Published 06/21/2025 Severity Medium CVE-2025-52708WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product H HUSKY Published 06/20/2025 Severity High CVE-2025-48266WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.8 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 05/19/2025 Severity Medium CVE-2025-3748Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode Exploitation status Not known exploited Fix YesAffected product T Taxonomy Chain Menu Published 05/02/2025 Severity Medium CVE-2025-32592WordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product T TableOn Published 04/17/2025 Severity High CVE-2025-26903WordPress InPost Gallery plugin <= 2.1.4.3 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product I InPost Gallery Published 04/15/2025 Severity Medium CVE-2025-32569WordPress TableOn plugin <= 1.0.4.3 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product T TableOn Published 04/11/2025 Severity Critical CVE-2025-32218WordPress TableOn plugin <= 1.0.5.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product T TableOn Published 04/04/2025 Severity Medium CVE-2025-26890WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H HUSKY Published 03/27/2025 Severity High CVE-2025-1514Active Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter Call Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Use constructor to create tables Published 03/26/2025 Severity High CVE-2025-2169WPCS – WordPress Currency Switcher Professional <= 1.2.0.4 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix YesAffected product W WPCS – WordPress Currency Switcher Professional Published 03/11/2025 Severity High CVE-2025-1661HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 03/11/2025 Severity Critical CVE-2025-0864Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Use constructor to create tables Published 02/18/2025 Severity Medium CVE-2025-26775WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product B BEAR Published 02/17/2025 Severity Medium CVE-2025-24605WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability Exploitation status Not known exploited Fix YesAffected product W WOLF Published 02/03/2025 Severity High CVE-2024-13340MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix YesAffected product M MDTF – Meta Data and Taxonomies Filter Published 01/23/2025 Severity Medium CVE-2024-12030MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection Exploitation status Not known exploited Fix YesAffected product M MDTF – Meta Data and Taxonomies Filter Published 01/08/2025 Severity Medium CVE-2023-40334WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product H HUSKY Published 12/13/2024 Severity Medium CVE-2024-10959Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.5 - Unauthenticated Arbitrary Shortcode Execution via woot_get_smth Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Use constructor to create tables Published 12/10/2024 Severity High CVE-2024-11002InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template Exploitation status Not known exploited Fix YesAffected product I InPost Gallery Published 11/26/2024 Severity Medium CVE-2024-11400HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 11/19/2024 Severity Medium CVE-2024-52396WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability Exploitation status Not known exploited Fix YesAffected product W WOLF Published 11/14/2024 Severity Medium CVE-2024-10640The FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.2 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix YesAffected product F FOX – Currency Switcher Professional for WooCommerce Published 11/09/2024 Severity High CVE-2024-10168Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Use constructor to create tables Published 11/06/2024 Severity Medium CVE-2024-50451WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product M MDTF Published 10/28/2024 Severity Medium CVE-2024-50450WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability Exploitation status Public exploit Fix YesAffected product M MDTF Published 10/28/2024 Severity High CVE-2024-7491HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.1 - Insecure Direct Object Reference to Unsubscribe Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 09/25/2024 Severity Medium CVE-2024-8623MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix YesAffected product M MDTF – Meta Data and Taxonomies Filter Published 09/24/2024 Severity High CVE-2024-8624MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection Exploitation status Not known exploited Fix YesAffected product M MDTF – Meta Data and Taxonomies Filter Published 09/24/2024 Severity Critical CVE-2024-8271FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix YesAffected product F FOX – Currency Switcher Professional for WooCommerce Published 09/14/2024 Severity High CVE-2024-43121WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix YesAffected product H HUSKY Published 08/13/2024 Severity Critical CVE-2024-6457HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 07/16/2024 Severity Critical CVE-2024-38700WordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability Exploitation status Not known exploited Fix YesAffected product W WPCS Published 07/12/2024 Severity Medium CVE-2024-32818WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product W WordPress Meta Data and Taxonomies Filter (MDTF) Published 06/09/2024 Severity Medium CVE-2024-35730WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 06/08/2024 Severity High CVE-2024-5039HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 05/29/2024 Severity Medium CVE-2024-34434WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability Exploitation status Not known exploited Fix YesAffected product W WordPress Meta Data and Taxonomies Filter (MDTF) Published 05/17/2024 Severity Medium CVE-2024-34558WordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product W WOLF Published 05/08/2024 Severity Medium CVE-2024-3734FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix YesAffected product F FOX – Currency Switcher Professional for WooCommerce Published 05/02/2024 Severity Medium CVE-2024-32691WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce Published 04/22/2024 Severity Medium CVE-2024-31430Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins Exploitation status Not known exploited Fix YesAffected product W WOLF – WordPress Posts Bulk Editor and Manager Professional Published 04/10/2024 Severity Medium CVE-2024-30462WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter for WooCommerce (formerly WOOF) Published 03/29/2024 Severity Medium CVE-2024-30463WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product B BEAR Published 03/29/2024 Severity Medium CVE-2024-30456WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product W WPCS Published 03/29/2024 Severity Medium CVE-2024-30457WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product W WordPress Meta Data and Taxonomies Filter (MDTF) Published 03/29/2024 Severity Medium CVE-2024-30458WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product W WOOCS – WooCommerce Currency Switcher Published 03/29/2024 Severity Medium CVE-2024-3061HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 03/29/2024 Severity High CVE-2024-30200WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product B BEAR Published 03/28/2024 Severity High CVE-2024-29763WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product W WordPress Meta Data and Taxonomies Filter (MDTF) Published 03/27/2024 Severity High CVE-2024-29932WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product W WordPress Meta Data and Taxonomies Filter (MDTF) Published 03/27/2024 Severity Medium CVE-2024-29906WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix YesAffected product W WordPress Meta Data and Taxonomies Filter (MDTF) Published 03/27/2024 Severity Medium CVE-2024-24835WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product B BEAR Published 03/23/2024 Severity Medium CVE-2023-50861WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter for WooCommerce (formerly WOOF) Published 03/15/2024 Severity Medium CVE-2024-1795HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 03/15/2024 Severity High CVE-2024-1796HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Exploitation status Not known exploited Fix YesAffected product H HUSKY – Products Filter Professional for WooCommerce Published 03/15/2024 Severity Medium CVE-2023-51480WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Published 02/10/2024 Severity Medium CVE-2024-24834WordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix YesAffected product B BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net Published 02/08/2024 Severity Medium CVE-2024-0790WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request Forgery Exploitation status Not known exploited Fix YesAffected product W WOLF – WordPress Posts Bulk Editor and Manager Professional Published 02/05/2024 Severity Medium CVE-2024-0796Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Cross-Site Request Forgery Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Use constructor to create tables Published 02/05/2024 Severity Medium CVE-2024-0791WOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Missing Authorization Exploitation status Not known exploited Fix YesAffected product W WOLF – WordPress Posts Bulk Editor and Manager Professional Published 02/05/2024 Severity Medium CVE-2024-0797Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Use constructor to create tables Published 02/05/2024 Severity Medium CVE-2023-51506WordPress WPCS Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix YesAffected product W WPCS – WordPress Currency Switcher Professional Published 02/01/2024 Severity Medium CVE-2024-22159WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix YesAffected product W WOLF – WordPress Posts Bulk Editor and Manager Professional Published 01/31/2024 Severity High CVE-2023-6556FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix YesAffected product F FOX – Currency Switcher Professional for WooCommerce Published 01/11/2024 Severity Medium CVE-2023-51505WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection Exploitation status Not known exploited Fix YesAffected product A Active Products Tables for WooCommerce. Professional products tables for WooCommerce store Published 12/29/2023 Severity Critical