Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
ultimate-product-catalogue
WordPress
· Plugin
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Ultimate Product Catalog <= 4.4.48 - Authenticated (Contributor+) Arbitrary File Upload
CVE-2016-20075
ultimate-product-catalogue
WordPress
High
Fix reported
2026-08-18
Ultimate Product Catalogue <= 5.2.15 - Cross-Site Request Forgery via reset_settings()
CVE-2024-31921
ultimate-product-catalogue
WordPress
Medium
Fix reported
2024-04-16
Ultimate Product Catalog – WordPress Catalog Plugin <= 5.0.25 - Cross-Site Request Forgery
CVE-2021-24993
ultimate-product-catalogue
WordPress
Medium
Fix reported
2024-01-22
Ultimate Product Catalog <= 4.2.21 - Authorization Bypass and Cross-Site Request Forgery
ultimate-product-catalogue
WordPress
High
Fix reported
2024-01-22
Ultimate Product Catalog <= 4.2.11 - Cross-Site Scripting
CVE-2017-12200
ultimate-product-catalogue
WordPress
Medium
Fix reported
2024-01-22
Ultimate Product Catalog < 4.2.3 - Authenticated SQL Injection
ultimate-product-catalogue
WordPress
Medium
Fix reported
2024-01-22
Ultimate Product Catalog < 4.2.22 - Arbitrary File Upload
ultimate-product-catalogue
WordPress
Critical
Fix reported
2024-01-22
Ultimate Product Catalog <= 3.8.1 - Missing Authorization to Plugin Settings Update
ultimate-product-catalogue
WordPress
Medium
Fix reported
2024-01-22
Ultimate Product Catalog <= 5.2.5 - Authenticated(Administrator+) Stored Cross-Site Scripting
CVE-2023-2711
ultimate-product-catalogue
WordPress
Medium
Fix reported
2024-01-22
Ultimate Product Catalog <= 4.2.22 - SQL Injection
CVE-2017-12199
ultimate-product-catalogue
WordPress
Critical
Fix reported
2024-01-22
Ultimate Product Catalogue < 3.1.3 - SQL Injection
ultimate-product-catalogue
WordPress
Critical
Fix reported
2024-01-22
Ultimate Product Catalog < 2.1.1 - Authenticated (Admin+) SQL Injection
ultimate-product-catalogue
WordPress
High
Fix reported
2024-01-22
Ultimate Product Catalog < 3.1.3 - Multiple Vulnerabilities
ultimate-product-catalogue
WordPress
High
Fix reported
2024-01-22