Advisories · Technology

impleCode eCommerce Product Catalog.

Every CVE that names impleCode eCommerce Product Catalog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116851 CVE record

CVSS 7.1 High

WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability
- impleCode eCommerce Product Catalog
- Cross-site scripting (XSS)
Not analysed yet 30 Oct 2026
CVE-2026-115596 CVE record

CVSS 7.1 High

WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability
- impleCode eCommerce Product Catalog
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-105056 CVE record

CVSS 6.5 Medium

WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
- impleCode eCommerce Product Catalog
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2026
CVE-2026-96344 CVE record

CVSS 7.2 High

WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability
- impleCode eCommerce Product Catalog
- Insecure deserialization
Not analysed yet 30 Sept 2026
CVE-2026-76128 CVE record

CVSS 6.4 Medium

eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
- implecode eCommerce Product Catalog
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2026
CVE-2026-57360 CVE record

CVSS 7.1 High

WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability
- impleCode eCommerce Product Catalog
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2026
CVE-2026-52693 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
- impleCode eCommerce Product Catalog
- SQL injection
Not analysed yet 15 Jun 2026
CVE-2025-49331 CVE record

CVSS 7.2 High

WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability
- impleCode eCommerce Product Catalog
- Insecure deserialization
Not analysed yet 17 Jun 2025
CVE-2024-32558 CVE record

CVSS 7.1 High

WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability
- impleCode eCommerce Product Catalog
- Cross-site scripting (XSS)
Not analysed yet 18 Apr 2024
CVE-2024-32437 CVE record

CVSS 4.3 Medium

WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability
- impleCode eCommerce Product Catalog
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2024