Realmag777 vulnerabilities, page 5

127 vulnerabilities

Known vulnerabilities in Realmag777 products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 26 products.

9.3CriticalCVE-2026-42755realmag777 · tableon +1 moreWordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through <= 1.0.5.1.EPSS0.40%4.3MediumCVE-2026-9241realmag777 · fox – currency switcher professional for woocommerce +1 moreFOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' ParameterThe FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and including 1.4.6. This is due to the `get_value()` function in `classes/fixed/fixed_user_role.php` trusting the attacker-controlled `$_REQUEST['wooc_order_user_roles']` parameter to determine the user's role context for role-based price resolution without any validation, allowing it to override the legitimate role data derived from the authenticated user's session object via `$user->roles`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to impersonate higher-privileged roles — such as wholesale customer or administrator — and obtain discounted or otherwise restricted pricing that should not be available to their actual role. This vulnerability only has practical impact when the fixed user-role pricing feature is enabled and at least one product has a privileged-role price configured.EPSS0.37%8.1HighCVE-2026-4094realmag777 · fox – currency switcher professional for woocommerce +1 moreFOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration DeletionThe FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_head' function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete the entire multi-currency configuration by visiting any wp-admin page with the `woocs_reset` parameter appended. Additionally, because no nonce is verified, this is also exploitable via Cross-Site Request Forgery against any administrator. The vulnerability may also be exploited by Subscriber-level users if the site is configured to allow Subscriber access to 'wp-admin' pages.EPSS0.50%9.3CriticalCVE-2026-39574realmag777 · inpost gallery +1 moreWordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerabilityUnauthenticated SQL Injection in InPost Gallery <= 2.1.4.6 versions.EPSS0.40%7.6HighCVE-2026-39497realmag777 · fox +1 moreWordPress FOX plugin <= 1.4.5 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Blind SQL Injection.This issue affects FOX: from n/a through <= 1.4.5.EPSS0.38%5.3MediumCVE-2026-39501realmag777 · fox +1 moreWordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerabilityMissing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through <= 1.4.5.EPSS0.31%9.3CriticalCVE-2026-66436realmag777 · active products tables for woocommerce +1 moreWordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerabilityUnauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.EPSS0.40%6.1MediumCVE-2026-18562realmag777 · husky – products filter for woocommerce professional +1 moreHUSKY <= 1.4.3 - Reflected Cross-Site ScriptingThe HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in versions up to, and including, 1.4.3. This is due to insufficient input sanitization and output escaping in the wp_load_js() function, which reads filter values from the URL path via the url_request extension's parse_url_query() and embeds them into an inline JavaScript string using json_encode() without escaping single quotes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link.EPSS0.23%7.5HighCVE-2026-18881realmag777 · tableon – wordpress posts table filterable +1 moreTableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter ParameterThe TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the `filter_data[comment_count]` parameter of the public `tableon_get_table_data` AJAX action in all versions up to, and including, 1.0.5.1. This is due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query — the value is split on `:` and both halves are interpolated directly into a `posts_where` SQL clause without `intval()` casting or `$wpdb->prepare()`. This makes it possible for unauthenticated attackers to append additional SQL queries into the already-existing query that can be used to extract sensitive information from the database (researcher demonstrated extraction of database(), wp_users.user_login, and wp_users.user_pass).EPSS0.51%7.2HighCVE-2026-57319realmag777 · fox +1 moreWordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in FOX <= 1.4.8 versions.EPSS0.25%7.2HighCVE-2026-57409realmag777 · active products tables for woocommerce +1 moreWordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.1.0.EPSS0.25%7.2HighCVE-2026-57320realmag777 · bear +1 moreWordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.EPSS0.25%8.1HighCVE-2026-92969realmag777 · husky – products filter for woocommerce professional +1 moreHUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAXThe HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.4 via the 'shortcode' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. This vulnerability is exploitable by unauthenticated users because the only access control is a nonce check against woof_front_nonce, which is publicly emitted into inline JavaScript on every front-end page and is therefore obtainable by any site visitor without authentication.EPSS0.65%7.6HighCVE-2026-45213realmag777 · bear +1 moreWordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through <= 1.1.7.1.EPSS0.38%7.3HighCVE-2026-95526realmag777 · bear +1 moreWordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerabilityUnauthenticated Broken Access Control in BEAR <= 1.2.2 versions.EPSS0.23%7.6HighCVE-2026-32458realmag777 · wolf +1 moreWordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through <= 1.0.8.7.EPSS0.40%6.5MediumCVE-2026-32450realmag777 · active products tables for woocommerce +1 moreWordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows DOM-Based XSS.This issue affects Active Products Tables for WooCommerce: from n/a through <= 1.0.7.EPSS0.23%6.5MediumCVE-2026-32455realmag777 · mdtf +1 moreWordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows DOM-Based XSS.This issue affects MDTF: from n/a through <= 1.3.5.EPSS0.23%6.4MediumCVE-2026-3513realmag777 · tableon – wordpress posts table filterable +1 moreTableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode AttributeThe TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableon_button' shortcode in all versions up to and including 1.0.4.4. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes such as 'class', 'help_link', 'popup_title', and 'help_title'. The do_shortcode_button() function extracts these attributes without sanitization and passes them to TABLEON_HELPER::draw_html_item(), which concatenates attribute values into HTML using single quotes without escaping (line 29: $item .= " {$key}='{$value}'"). This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.EPSS0.35%8.8HighCVE-2023-40334pluginus · husky_-_products_filter_professional_for_woocommerce +2 moreWordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerabilityMissing Authorization vulnerability in RealMag777 HUSKY woocommerce-products-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HUSKY: from n/a through <= 1.3.4.2.EPSS0.48%