wpfactory vulnerabilities

Recent CVEs affecting wpfactory products. 15 tracked.

wpfactory has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 15. Most recent: 2025-05-19. Highest priority: CVE-2024-13528 (score 37/100).

CVE-2023-0062 MEDIUM 5.4 UPGRADE The EAN for WooCommerce WordPress plugin before 4.4.3 does not validate and escape some of its shortcode attri
CVE-2025-48254 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactor
CVE-2025-48253 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactor
CVE-2025-48252 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactor
CVE-2024-9384 MEDIUM 6.1 UPGRADE The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected
CVE-2024-9377 MEDIUM 6.1 UPGRADE The Products, Order & Customers Export for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-S
CVE-2024-9205 MEDIUM 6.1 UPGRADE The Maximum Products per User for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scrip
CVE-2024-9189 MEDIUM 5.3 UPGRADE The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data
CVE-2024-8788 MEDIUM 6.1 UPGRADE The EU/UK VAT Manager for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due
CVE-2024-8656 MEDIUM 6.1 UPGRADE The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad
CVE-2024-44061 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactor
CVE-2024-13774 MEDIUM 6.1 UPGRADE The Wishlist for WooCommerce: Multi Wishlists Per Customer plugin for WordPress is vulnerable to Cross-Site Re
CVE-2024-13528 HIGH 7.5 UPGRADE The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in
CVE-2024-13525 MEDIUM 6.5 UPGRADE The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Ex
CVE-2024-10519 MEDIUM 6.1 UPGRADE The Wishlist for WooCommerce: Multi Wishlists Per Customer PRO plugin for WordPress is vulnerable to Reflected

FAQ

How do I fix wpfactory vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wpfactory being exploited right now?

None of the tracked wpfactory CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wpfactory CVE should I patch first?

CVE-2024-13528 currently ranks highest (37/100): The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in.

Products

RSS feed for wpfactory · ← Back to latest CVEs