Vulnerabilidades de PluginUs.Net

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de PluginUs.Net: 9 registro(s), com severidade, exploração e correções.

MDTF 4 HUSKY 1 FOX 1 WOLF 1 Active Products Tables for WooCommerce 1 BEAR 1

Somente exploradas (KEV) →

CVE-2026-108175 Média · 6.5 CWE-79 15/10/2026

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0.

CVE-2026-108151 Média · 5.3 CWE-94 14/10/2026

WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.

CVE-2026-108489 Média · 5.3 CWE-201 13/10/2026

WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.3.

CVE-2026-108179 Alta · 7.6 CWE-89 13/10/2026

WordPress WOLF plugin <= 1.1.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLF: from n/a through 1.1.1.

CVE-2026-108174 Média · 5.3 CWE-862 13/10/2026

WordPress FOX plugin <= 1.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4.

CVE-2026-95608 Alta · 7.1 CWE-79 09/10/2026

WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

CVE-2026-54845 Alta · 8.1 CWE-98 25/06/2026

WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.

CVE-2026-54843 Crítica · 9.3 CWE-89 25/06/2026

Injeção de SQL não autenticada no plugin MDTF

Injeção de SQL não autenticada em versões do MDTF <= 1.3.7.

CVE-2026-27415 Média · 4.3 CWE-352 07/05/2026

WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery. This issue affects BEAR: from n/a through 1.1.5.