All products

ultimate-product-catalogue

WordPress · Plugin
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Ultimate Product Catalog <= 4.4.48 - Authenticated (Contributor+) Arbitrary File UploadCVE-2016-20075 ultimate-product-catalogue WordPress High Fix reported
Ultimate Product Catalogue <= 5.2.15 - Cross-Site Request Forgery via reset_settings()CVE-2024-31921 ultimate-product-catalogue WordPress Medium Fix reported
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request ForgeryCVE-2021-24993 ultimate-product-catalogue WordPress Medium Fix reported
Ultimate Product Catalog <= 4.2.21 - Authorization Bypass and Cross-Site Request Forgery ultimate-product-catalogue WordPress High Fix reported
Ultimate Product Catalog <= 4.2.11 - Cross-Site ScriptingCVE-2017-12200 ultimate-product-catalogue WordPress Medium Fix reported
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection ultimate-product-catalogue WordPress Medium Fix reported
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload ultimate-product-catalogue WordPress Critical Fix reported
Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update ultimate-product-catalogue WordPress Medium Fix reported
Ultimate Product Catalog <= 5.2.5 - Authenticated(Administrator+) Stored Cross-Site ScriptingCVE-2023-2711 ultimate-product-catalogue WordPress Medium Fix reported
Ultimate Product Catalog <= 4.2.22 - SQL InjectionCVE-2017-12199 ultimate-product-catalogue WordPress Critical Fix reported
Ultimate Product Catalogue < 3.1.3 - SQL Injection ultimate-product-catalogue WordPress Critical Fix reported
Ultimate Product Catalog < 2.1.1 - Authenticated (Admin+) SQL Injection ultimate-product-catalogue WordPress High Fix reported
Ultimate Product Catalog < 3.1.3 - Multiple Vulnerabilities ultimate-product-catalogue WordPress High Fix reported