eCommerce Product Catalog Plugin for WordPress vulnerabilities

2 known vulnerabilities in eCommerce Product Catalog Plugin for WordPress from impleCode. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  eCommerce Product Catalog Plugin for WordPress: Cross-Site Request Forgery

  CVE-2024-12771Dec 21, 2024impleCode

  The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customer_panel_password_reset' functi

• 7.5 High severity

  eCommerce Product Catalog Plugin for WordPress: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-51688Dec 29, 2023impleCode

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3.26.