Wpinstinct vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wpinstinct products: 2 record(s), with severity, exploitation and fixes.

WooCommerce Vehicle Parts Finder 2

Exploited only (KEV) →

CVE-2025-49911 High · 7.1 CWE-79 Oct 22, 2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpinstinct WooCommerce Vehicle Parts Finder woo-vehicle-parts-finder allows Reflected XSS.This issue affects WooCommerce Vehicle Parts Finder: from n/a through <= 3.7.

CVE-2025-49380 Critical · 9.8 CWE-502 Oct 22, 2025

wpinstinct WooCommerce Vehicle Parts Finder Deserialization Object Injection (CVE-2025-49380)

Deserialization of Untrusted Data vulnerability in wpinstinct WooCommerce Vehicle Parts Finder woo-vehicle-parts-finder allows Object Injection.This issue affects WooCommerce Vehicle Parts Finder: from n/a through <= 3.7.