Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-4329

Product list Widget for Woocommerce < 3.4.0 - Reflected XSS

The Product list Widget for Woocommerce WordPress plugin before 3.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against both unauthenticated and authenticated users (such as high privilege one like admin).

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Product List Widget For Woocommerce Project
Products
Product List Widget For Woocommerce
CVE-2026-10735

ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 Pro smart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Product List Widget For Woocommerce Project Real Testimonials Pro Smart Post Show Pro and 1 more
Products
Product List Widget For Woocommerce Real Testimonials Pro Smart Post Show Pro and 1 more