Vendor

    impleCode

    28 known vulnerabilities in products by impleCode, 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in impleCode
    MediumCVE-2021-24875

    eCommerce Product Catalog for WordPress < 3.0.39 - Reflected Cross-Site Scripting

    		6.1
    MediumCVE-2021-24894

    Reviews Plus < 1.2.14 - Subscriber+ Reviews DoS

    		6.5
    HighCVE-2026-96344

    WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability

    		7.2
    CriticalCVE-2026-52693

    WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-115596

    WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-116851

    WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-76128

    impleCode eCommerce Product Catalog: Cross-site Scripting

    		6.4
    MediumCVE-2026-105056

    WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-49331

    WordPress eCommerce Product Catalog plugin <= 3.4.3 - PHP Object Injection Vulnerability

    		7.2
    HighCVE-2026-57360

    WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-12771

    impleCode eCommerce Product Catalog Plugin for WordPress: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2024-32558

    WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2023-29388

    WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2023-47839

    WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2025-58992

    WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    HighCVE-2023-51687

    WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data Exposure

    		5.3
    HighCVE-2023-51688

    WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data Exposure

    		5.3
    MediumCVE-2025-49305

    WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-1405

    impleCode Product Catalog Simple: Cross-site Scripting

    		6.4
    MediumCVE-2023-25049

    WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)

    		5.9
    MediumCVE-2023-5979

    eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

    		6.5
    MediumCVE-2021-4392

    eCommerce Product Catalog Plugin for WordPress <= 2.9.43 - Cross-Site Request Forgery Bypass

    		4.3
    MediumCVE-2021-4393

    eCommerce Product Catalog Plugin for WordPress <= 3.0.17 - Cross-Site Request Forgery Bypass

    		4.3
    MediumCVE-2025-62061

    WordPress Product Catalog Simple plugin <= 1.8.4 - Cross Site Request Forgery (CSRF) vulnerability

    		4.3
    MediumCVE-2020-36743

    Product Catalog Simple <= 1.5.13 - Cross-Site Request Forgery Bypass

    		4.3

    All vulnerabilities in search

    Products

    Products by impleCode
    Ecommerce Product Catalog180
    Product Catalog Simple110
    Ecommerce Product Catalog Plugin For Wordpress70