Skip to content
Noroxi

PluginUS records

88 published records for vendor pluginus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
43.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

88 records
  • CVE-2025-1661
    56Plan

    HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    pluginus · husky - products filter professional for woocommerceMar 11, 2025

  • CVE-2022-4063
    42Plan

    InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    pluginus · inpost galleryDec 19, 2022

  • CVE-2024-50450
    39Monitor

    WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    pluginus · wordpress meta data and taxonomies filterOct 28, 2024

  • CVE-2023-51505
    39Monitor

    WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    pluginus · wootDec 29, 2023

  • CVE-2023-40010
    39Monitor

    WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    pluginus · husky - products filter professional for woocommerceDec 20, 2023

  • CVE-2024-8624
    39Monitor

    MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection

    CriticalCVSS 9.9No exploitEPSS 0%

    pluginus · wordpress meta data and taxonomies filterSep 23, 2024

  • CVE-2024-6457
    36Monitor

    HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection

    HighCVSS 7.5No exploitEPSS 20%

    pluginus · husky - products filter professional for woocommerceJul 16, 2024

  • CVE-2021-24566
    35Monitor

    WooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File Inclusion

    HighCVSS 8.8No exploitEPSS 1%

    pluginus · fox - currency switcher professional for woocommerceJan 16, 2024

  • CVE-2021-20781
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions pri

    HighCVSS 8.8No exploitEPSS 1%

    pluginus · wordpress meta data and taxonomies filterJul 13, 2021

  • CVE-2024-32680
    35Monitor

    WordPress HUSKY plugin <= 1.3.5.2 - Remote Code Execution (RCE) vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    pluginus · husky - products filter professional for woocommerceMay 17, 2024

  • CVE-2024-52396
    35Monitor

    WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    pluginus · wolf - wordpress posts bulk editor and products manager professionalNov 14, 2024

  • CVE-2024-1795
    35Monitor

    HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection

    HighCVSS 8.8No exploitEPSS 1%

    pluginus · husky - products filter professional for woocommerceMar 15, 2024

  • CVE-2023-40334
    35Monitor

    WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · husky - products filter professional for woocommerceDec 13, 2024

  • CVE-2023-4920
    35Monitor

    BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · bear - woocommerce bulk editor and products manager professionalOct 20, 2023

  • CVE-2024-32818
    35Monitor

    WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · wordpress meta data and taxonomies filterJun 9, 2024

  • CVE-2023-33314
    35Monitor

    WordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · bear - woocommerce bulk editor and products manager professionalMay 28, 2023

  • CVE-2023-46152
    35Monitor

    WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · wolf - wordpress posts bulk editor and products manager professionalOct 25, 2023

  • CVE-2023-34028
    35Monitor

    WordPress WOLF Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · wolf - wordpress posts bulk editor and manager professionalJun 22, 2023

  • CVE-2023-49834
    35Monitor

    WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · fox - currency switcher professional for woocommerceDec 17, 2023

  • CVE-2024-30456
    35Monitor

    WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · wordpress currency switcherMar 29, 2024

  • CVE-2024-30457
    35Monitor

    WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · wordpress meta data and taxonomies filterMar 29, 2024

  • CVE-2024-30458
    35Monitor

    WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · fox - currency switcher professional for woocommerceMar 29, 2024

  • CVE-2024-30462
    35Monitor

    WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · husky - products filter professional for woocommerceMar 29, 2024

  • CVE-2023-50861
    35Monitor

    WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · husky - products filter professional for woocommerceMar 15, 2024

  • CVE-2024-31430
    35Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins

    HighCVSS 8.8No exploitEPSS 0%

    pluginus · bear - woocommerce bulk editor and products manager professionalApr 10, 2024