en
WP Lab is a software developer specializing in self-hosted WordPress and WooCommerce plugins for e-commerce marketplace integration. Its WP-Lister products help merchants list and manage products across eBay and Amazon, with capabilities for catalog publishing, product variations, inventory, orders, and fulfillment. The tools are delivered as WordPress plugins for online stores.
As of 11/08/2026, WP Lab recorded 2 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, WP-Lister Lite for Amazon had the most security vulnerabilities in the WP Lab ecosystem, with 1 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-121778WordPress WP-Lister Lite for Amazon plugin <= 2.9.2 - Broken Access Control vulnerabilityCVE-2026-66628SQL Injection in WP Lab WP-Lister Lite for eBay can expose database dataCVE-2026-25384WordPress WP-Lister Lite for eBay plugin <= 3.8.5 - Broken Access Control vulnerabilityCVE-2025-62881WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Broken Access Control vulnerabilityCVE-2024-47380WordPress WP-Lister Lite for eBay plugin <= 3.6.3 - Reflected Cross Site Scripting (XSS) vulnerability| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-121778WordPress WP-Lister Lite for Amazon plugin <= 2.9.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes |
| Affected productWP-Lister Lite for Amazon |
| Published11/07/2026 |
| SeverityMedium |
CVE-2026-66628SQL Injection in WP Lab WP-Lister Lite for eBay can expose database data | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published09/17/2026 | SeverityHigh |
|---|
CVE-2026-25384WordPress WP-Lister Lite for eBay plugin <= 3.8.5 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published02/19/2026 | SeverityMedium |
|---|
CVE-2025-62881WordPress WP-Lister Lite for eBay plugin <= 3.8.3 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published10/27/2025 | SeverityMedium |
|---|
CVE-2024-47380WordPress WP-Lister Lite for eBay plugin <= 3.6.3 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published10/05/2024 | SeverityHigh |
|---|
CVE-2024-43306WordPress WP-Lister Lite for eBay plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published08/18/2024 | SeverityHigh |
|---|
CVE-2024-37261WordPress WP-Lister Lite for Amazon plugin <= 2.6.16 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusActively exploited | FixYes | Affected productWP-Lister Lite for Amazon | Published07/22/2024 | SeverityHigh |
|---|
CVE-2024-32836WordPress WP-Lister Lite for eBay plugin <= 3.5.11 - Arbitrary File Upload vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published04/24/2024 | SeverityCritical |
|---|
CVE-2024-32573WordPress WP-Lister Lite for eBay plugin <=3.5.11 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-30199WordPress WP-Lister Lite for Amazon plugin <= 2.6.8 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for Amazon | Published03/27/2024 | SeverityHigh |
|---|
CVE-2024-2889WordPress WP-Lister Lite for Amazon plugin <= 2.6.11 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for Amazon | Published03/26/2024 | SeverityMedium |
|---|
CVE-2024-22307WordPress WP-Lister Lite for eBay plugin <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productWP-Lister Lite for eBay | Published01/31/2024 | SeverityHigh |
|---|
12 Results | Page 1 of 1