Advisories · Technology

impleCode Product Catalog Simple.

Every CVE that names impleCode Product Catalog Simple among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-62061 CVE record

CVSS 4.3 Medium

WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability
- impleCode Product Catalog Simple
- Cross-site request forgery (CSRF)
Not analysed yet 22 Oct 2025
CVE-2025-58992 CVE record

CVSS 6.5 Medium

WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability
- impleCode Product Catalog Simple
- Cross-site scripting (XSS)
Not analysed yet 22 Sept 2025
CVE-2025-49305 CVE record

CVSS 6.5 Medium

WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability
- impleCode Product Catalog Simple
- Cross-site scripting (XSS)
Not analysed yet 6 Jun 2025
CVE-2025-1405 CVE record

CVSS 6.4 Medium

Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode
- implecode Product Catalog Simple
- Cross-site scripting (XSS)
Not analysed yet 28 Feb 2025
CVE-2023-51687 CVE record

CVSS 5.3 Medium

WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure
- impleCode Product Catalog Simple
- Information disclosure
Not analysed yet 29 Dec 2023
CVE-2020-36743 CVE record

CVSS 4.3 Medium

Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass
- implecode Product Catalog Simple
- Cross-site request forgery (CSRF)
Not analysed yet 1 Jul 2023
CVE-2023-29388 CVE record

CVSS 7.1 High

WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)
- impleCode Product Catalog Simple
- Cross-site scripting (XSS)
Not analysed yet 7 Apr 2023