Skip to content
Noroxi

impleCode records

13 published records for vendor implecode.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
69.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2023-51688
    30Monitor

    WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    implecode · ecommerce product catalogDec 29, 2023

  • CVE-2023-51687
    30Monitor

    WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    implecode · product catalog simpleDec 29, 2023

  • CVE-2021-24894
    26Monitor

    Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS

    MediumCVSS 6.5No exploitEPSS 1%

    implecode · reviews plusNov 23, 2021

  • CVE-2023-5979
    26Monitor

    eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

    MediumCVSS 6.5No exploitEPSS 0%

    implecode · ecommerce product catalogDec 4, 2023

  • CVE-2021-24875
    24Monitor

    eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    implecode · ecommerce product catalogNov 23, 2021

  • CVE-2023-29388
    24Monitor

    WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    implecode · product catalog simpleApr 7, 2023

  • CVE-2023-47839
    21Monitor

    WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    implecode · ecommerce product catalogNov 22, 2023

  • CVE-2025-1405
    21Monitor

    Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    implecode · product catalog simpleFeb 28, 2025

  • CVE-2023-25049
    19Monitor

    WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    implecode · ecommerce product catalogApr 7, 2023

  • CVE-2023-1470
    19Monitor

    eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    implecode · ecommerce product catalogMar 17, 2023

  • CVE-2021-4393
    17Monitor

    eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass

    MediumCVSS 4.3No exploitEPSS 0%

    implecode · ecommerce product catalogJul 1, 2023

  • CVE-2021-4392
    17Monitor

    eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass

    MediumCVSS 4.3No exploitEPSS 0%

    implecode · ecommerce product catalogJul 1, 2023

  • CVE-2020-36743
    17Monitor

    Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass

    MediumCVSS 4.3No exploitEPSS 0%

    implecode · product catalog simpleJul 1, 2023