PluginUs.Net vulnerabilities

🔔 Create alert RSS

Published CVEs affecting PluginUs.Net products: 9 record(s), with severity, exploitation and fixes.

MDTF 4 HUSKY 1 FOX 1 WOLF 1 Active Products Tables for WooCommerce 1 BEAR 1

Exploited only (KEV) →

CVE-2026-108175 Medium · 6.5 CWE-79 Oct 15, 2026

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0.

CVE-2026-108151 Medium · 5.3 CWE-94 Oct 14, 2026

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.

CVE-2026-108489 Medium · 5.3 CWE-201 Oct 13, 2026

WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.3.

CVE-2026-108179 High · 7.6 CWE-89 Oct 13, 2026

WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.

CVE-2026-108174 Medium · 5.3 CWE-862 Oct 13, 2026

WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4.

CVE-2026-95608 High · 7.1 CWE-79 Oct 9, 2026

WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

CVE-2026-54845 High · 8.1 CWE-98 Jun 25, 2026

WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.

CVE-2026-54843 Critical · 9.3 CWE-89 Jun 25, 2026

MDTF Plugin Unauthenticated SQL Injection

Unauthenticated SQL Injection in MDTF <= 1.3.7 versions.

CVE-2026-27415 Medium · 4.3 CWE-352 May 7, 2026

WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5.