{"items":[{"id":"CVE-2026-116851","published":"2026-10-30T18:30:50.217Z","updated":"2026-10-30T18:50:07.289Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-115596","published":"2026-10-28T13:00:13.283Z","updated":"2026-10-28T16:07:36.842Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2026-105056","published":"2026-10-05T08:46:55.611Z","updated":"2026-10-06T10:41:52.779Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-96344","published":"2026-09-30T12:27:19.627Z","updated":"2026-09-30T13:27:11.167Z","title":"WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-76128","published":"2026-08-25T09:27:52.427Z","updated":"2026-08-25T11:31:27.695Z","title":"eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute","severity":"MEDIUM","score":6.4,"vendor":"implecode","product":"eCommerce Product Catalog","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2026-57360","published":"2026-07-02T11:15:20.147Z","updated":"2026-07-02T14:32:52.699Z","title":"WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-52693","published":"2026-06-15T20:19:30.813Z","updated":"2026-06-15T21:36:28.696Z","title":"WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2025-62061","published":"2025-10-22T14:32:52.854Z","updated":"2026-04-28T16:14:00.105Z","title":"WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"impleCode","product":"Product Catalog Simple","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2025-58992","published":"2025-09-22T18:26:07.610Z","updated":"2026-04-28T16:13:51.001Z","title":"WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"impleCode","product":"Product Catalog Simple","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2025-49331","published":"2025-06-17T15:01:22.874Z","updated":"2026-04-28T16:13:01.383Z","title":"WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability","severity":"HIGH","score":7.2,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2025-49305","published":"2025-06-06T12:53:48.326Z","updated":"2026-04-28T16:13:00.753Z","title":"WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"impleCode","product":"Product Catalog Simple","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2025-1405","published":"2025-02-28T07:03:46.974Z","updated":"2026-04-08T17:20:16.030Z","title":"Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products Shortcode","severity":"MEDIUM","score":6.4,"vendor":"implecode","product":"Product Catalog Simple","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2024-12771","published":"2024-12-21T07:02:59.391Z","updated":"2026-04-08T16:45:54.063Z","title":"eCommerce Product Catalog Plugin for WordPress <= 3.3.43 - Cross-Site Request Forgery to Password Reset","severity":"HIGH","score":8.8,"vendor":"implecode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2024-32822","published":"2024-04-26T11:21:33.939Z","updated":"2026-04-28T16:09:42.034Z","title":"WordPress Reviews Plus plugin <= 1.3.4 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"impleCode","product":"Reviews Plus","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2024-32558","published":"2024-04-18T10:08:48.366Z","updated":"2026-04-28T16:09:37.620Z","title":"WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00371,"kevAdded":null},{"id":"CVE-2024-32437","published":"2024-04-15T08:07:25.905Z","updated":"2026-04-28T16:09:35.524Z","title":"WordPress eCommerce Product Catalog plugin <= 3.3.28 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":4.3,"vendor":"impleCode","product":"eCommerce Product Catalog","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2023-51688","published":"2023-12-29T14:53:55.107Z","updated":"2026-04-28T16:09:04.773Z","title":"WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure","severity":"MEDIUM","score":5.3,"vendor":"impleCode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2023-51687","published":"2023-12-29T14:51:15.619Z","updated":"2026-04-28T16:09:04.658Z","title":"WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure","severity":"MEDIUM","score":5.3,"vendor":"impleCode","product":"Product Catalog Simple","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2023-47839","published":"2023-11-22T23:22:55.536Z","updated":"2026-04-28T16:08:52.974Z","title":"WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":6.5,"vendor":"impleCode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2020-36743","published":"2023-07-01T04:26:50.398Z","updated":"2026-04-08T16:46:13.369Z","title":"Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass","severity":"MEDIUM","score":4.3,"vendor":"implecode","product":"Product Catalog Simple","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2021-4392","published":"2023-07-01T04:26:49.560Z","updated":"2026-04-08T16:44:29.911Z","title":"eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass","severity":"MEDIUM","score":4.3,"vendor":"implecode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2021-4393","published":"2023-07-01T04:26:47.006Z","updated":"2026-04-08T16:36:32.197Z","title":"eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass","severity":"MEDIUM","score":4.3,"vendor":"implecode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2023-29388","published":"2023-04-07T14:48:45.268Z","updated":"2026-04-28T16:08:17.836Z","title":"WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"impleCode","product":"Product Catalog Simple","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2023-25049","published":"2023-04-07T11:12:16.983Z","updated":"2026-04-28T16:08:07.392Z","title":"WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"impleCode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2023-1470","published":"2023-03-17T13:13:15.254Z","updated":"2026-04-08T16:42:47.876Z","title":"eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting","severity":"MEDIUM","score":4.4,"vendor":"implecode","product":"eCommerce Product Catalog Plugin for WordPress","kev":false,"epss":0.00377,"kevAdded":null}]}