CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2711 – Ultimate Product Catalog < 5.2.6 - Admin+ Stored XSS
https://notcve.org/view.php?id=CVE-2023-2711
05 Jun 2023 — The Ultimate Product Catalog WordPress plugin before 5.2.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) The Ultimate Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 5.2.5 due to insufficient input sanitization and output escaping. ... • https://wpscan.com/vulnerability/71c5b5b5-8694-4738-8e4b-8670a8d21c86 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2021-24993 – Ultimate Product Catalog < 5.0.26 - Subscriber+ Arbitrary Product Creation & Settings Update
https://notcve.org/view.php?id=CVE-2021-24993
06 Jan 2022 — The Ultimate Product Catalog WordPress plugin before 5.0.26 does not have authorisation and CSRF checks in some AJAX actions, which could allow any authenticated users, such as subscriber to call them and add arbitrary products, or change the plugin's settings for example El plugin Ultimate Product Catalog de WordPress versiones anteriores a 5.0.26 no presenta comprobaciones de autorización y de tipo CSRF en algunas acciones AJAX, lo que podría permitir a cualquier usuario autenticado, como el suscriptor, l... • https://plugins.trac.wordpress.org/changeset/2650578 • CWE-352: Cross-Site Request Forgery (CSRF) CWE-862: Missing Authorization •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2017-12199 – Ultimate Product Catalog <= 4.2.22 - SQL Injection
https://notcve.org/view.php?id=CVE-2017-12199
01 Aug 2017 — The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-item, video_update_order video-item, image_update_order list-item, tag_group_update_order list_item, category_products_update_order category-product-item, custom_fields_update_order field-item, categories_update_order category-item, subcategories_update_order subcategory-item, and tags_update_order tag-list-item. El plugin Etoile Ultimate Product Cata... • https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2017-12200 – Ultimate Product Catalog <= 4.2.11 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2017-12200
01 Aug 2017 — The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component. El plugin Etoile Ultimate Product Catalog en su versión 4.2.11 para WordPress tiene una vulnerabilidad de tipo Cross-Site Scripting (XSS) en el componente Add Product Manually. • https://github.com/kevins1022/cve/blob/master/wordpress-product-catalog.md • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •