Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

WPClever Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Affected product	Published	Severity
`CVE-2026-7436`WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Attribute	Exploitation statusNot known exploited	FixYes	Affected productWPC Badge Management for WooCommerce	Published07/29/2026	SeverityMedium
`CVE-2026-49061`WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Product Options for WooCommerce	Published06/15/2026	SeverityHigh
`CVE-2026-48883`WordPress WPC Product Bundles for WooCommerce plugin <= 8.5.3 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Product Bundles for WooCommerce	Published06/15/2026	SeverityHigh
`CVE-2025-14767`WPC Badge Management for WooCommerce <= 3.1.6 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'text' Attribute	Exploitation statusNot known exploited	FixYes	Affected productWPC Badge Management for WooCommerce	Published05/13/2026	SeverityMedium
`CVE-2026-6725`WPC Smart Messages for WooCommerce <= 4.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Messages for WooCommerce	Published04/28/2026	SeverityMedium
`CVE-2026-32407`WordPress WPC Smart Wishlist for WooCommerce plugin <= 5.0.8 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Wishlist for WooCommerce	Published03/13/2026	SeverityMedium
`CVE-2026-32406`WordPress WPC Product Bundles for WooCommerce plugin <= 8.4.5 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Product Bundles for WooCommerce	Published03/13/2026	SeverityMedium
`CVE-2025-60248`WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Product Options for WooCommerce	Published11/06/2025	SeverityHigh
`CVE-2025-12115`WPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration	Exploitation statusNot known exploited	FixYes	Affected productWPC Name Your Price for WooCommerce	Published10/31/2025	SeverityHigh
`CVE-2025-62903`WordPress WPC Smart Messages for WooCommerce plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Messages for WooCommerce	Published10/27/2025	SeverityMedium
`CVE-2025-49908`WordPress WPC Countdown Timer for WooCommerce plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Countdown Timer for WooCommerce	Published10/22/2025	SeverityMedium
`CVE-2025-11741`WPC Smart Quick View for WooCommerce <= 4.2.5 - Insecure Direct Object Reference to Unauthenticated Private Product Exposure	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Quick View for WooCommerce	Published10/18/2025	SeverityMedium
`CVE-2025-11742`WPC Smart Wishlist for WooCommerce <= 5.0.4 - Missing Authorization to Authenticated (Subscriber+) Information Exposure	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Wishlist for WooCommerce	Published10/18/2025	SeverityMedium
`CVE-2025-11518`WPC Smart Wishlist for WooCommerce <= 5.0.3 - Insecure Direct Object Reference to Unauthenticated Wishlist Manipulation	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Wishlist for WooCommerce	Published10/11/2025	SeverityMedium
`CVE-2025-8618`WPC Smart Quick View for WooCommerce <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via woosq_btn Shortcode	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Quick View for WooCommerce	Published08/20/2025	SeverityMedium
`CVE-2025-7496`WPC Smart Compare for WooCommerce <= 6.4.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Compare for WooCommerce	Published08/19/2025	SeverityMedium
`CVE-2025-5530`WPC Smart Compare for WooCommerce <= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Compare for WooCommerce	Published07/11/2025	SeverityMedium
`CVE-2025-3418`WPC Admin Columns 2.0.6 - 2.1.0 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update	Exploitation statusNot known exploited	FixYes	Affected productWPC Admin Columns	Published04/12/2025	SeverityHigh
`CVE-2025-30825`WordPress WPC Smart Linked Products plugin <= 1.3.5 - Privilege Escalation vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Linked Products - Upsells & Cross-sells for WooCommerce	Published04/01/2025	SeverityHigh
`CVE-2025-30772`WordPress WPC Smart Upsell Funnel for WooCommerce plugin <= 3.0.4 - Arbitrary Option Update to Privilege Escalation vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Upsell Funnel for WooCommerce	Published03/27/2025	SeverityHigh
`CVE-2024-12432`WPC Shop as a Customer for WooCommerce <= 1.2.8 - Authentication Bypass Due to Insufficiently Unique Key	Exploitation statusNot known exploited	FixYes	Affected productWPC Shop as a Customer for WooCommerce	Published12/18/2024	SeverityHigh
`CVE-2024-12004`WPC Order Notes for WooCommerce <= 1.5.2 - Cross-Site Request Forgery to Reflected Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productWPC Order Notes for WooCommerce	Published12/11/2024	SeverityMedium
`CVE-2024-5020`Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Quick View for WooCommerce	Published12/04/2024	SeverityMedium
`CVE-2024-43312`WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.1.9 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Frequently Bought Together for WooCommerce	Published11/01/2024	SeverityMedium
`CVE-2024-10437`WPC Smart Messages for WooCommerce <= 4.2.1 - Missing Authorization to Authenticated (Subscriber+) Message Activation/Deactivation	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Messages for WooCommerce	Published10/29/2024	SeverityMedium
`CVE-2024-10436`WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Messages for WooCommerce	Published10/29/2024	SeverityHigh
`CVE-2024-50416`WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability	Exploitation statusPublic exploit	FixYes	Affected productWPC Shop as a Customer for WooCommerce	Published10/28/2024	SeverityHigh
`CVE-2024-30537`WordPress WPC Badge Management for WooCommerce plugin <= 2.4.0 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Badge Management for WooCommerce	Published06/09/2024	SeverityMedium
`CVE-2024-2838`WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productWPC Composite Products for WooCommerce	Published04/27/2024	SeverityMedium
`CVE-2024-32687`WordPress WPC Frequently Bought Together for WooCommerce plugin <= 7.0.3 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Frequently Bought Together for WooCommerce	Published04/22/2024	SeverityMedium
`CVE-2024-32520`WordPress WPC Grouped Product for WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Affected productWPC Grouped Product for WooCommerce	Published04/17/2024	SeverityMedium
`CVE-2023-6494`WPC Smart Quick View for WooCommerce <= 4.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Quick View for WooCommerce	Published04/13/2024	SeverityMedium
`CVE-2023-52127`WordPress WPC Product Bundles for WooCommerce Plugin <= 7.3.1 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productWPC Product Bundles for WooCommerce	Published01/05/2024	SeverityMedium
`CVE-2023-34386`WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Affected productWPC Smart Wishlist for WooCommerce	Published11/09/2023	SeverityMedium
`CVE-2022-1465`WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productWPC Smart Wishlist for WooCommerce	Published05/16/2022	SeverityUnknown
`CVE-2022-0397`WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting	Exploitation statusNot confirmed	FixYes	Affected productWPC Smart Wishlist for WooCommerce	Published03/28/2022	SeverityUnknown