Pluginus vulnerabilities, page 5
85 vulnerabilities
Known vulnerabilities in Pluginus products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.
HighCVE-2023-49834pluginus · fox_-_currency_switcher_professional_for_woocommerce +2 moreWordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in realmag777 FOX – Currency Switcher Professional for WooCommerce.This issue affects FOX – Currency Switcher Professional for WooCommerce: from n/a through 1.4.1.4.EPSS0.25%MediumCVE-2023-6556pluginus · fox_-_currency_switcher_professional_for_woocommerce +2 moreFOX – Currency Switcher Professional for WooCommerce <= 1.4.1.6 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingThe FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via currency options in all versions up to, and including, 1.4.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.41%HighCVE-2023-34028pluginus · wolf_-_wordpress_posts_bulk_editor_and_manager_professional +2 moreWordPress WOLF Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7 versions.EPSS0.26%HighCVE-2023-50861pluginus · husky_-_products_filter_professional_for_woocommerce +2 moreWordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).This issue affects HUSKY – Products Filter for WooCommerce (formerly WOOF): from n/a through 1.3.4.3.EPSS0.23%HighCVE-2023-33314pluginus · bear_-_woocommerce_bulk_editor_and_products_manager_professional +2 moreWordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <= 1.1.3.1 versions.EPSS0.30%