WPFactory vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 202410
3. 202530
4. 20267

Newest CVEs

• CVE-2026-112866

  WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability

  WPFactory · Product Filter by WBW

  Critical9.3
• CVE-2026-93771

  WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability

  WPFactory · Cost of Goods for WooCommerce

  High7.2
• CVE-2026-39437

  WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability

  WPFactory · Min Max Step Quantity Limits Manager for WooCommerce

  High7.1
• CVE-2026-24993

  WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability

  WPFactory · Advanced WooCommerce Product Sales Reporting

  Critical9.3
• CVE-2026-23977

  WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability

  WPFactory · Helpdesk Support Ticket System for WooCommerce

  High7.5
• CVE-2026-24992

  WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability

  WPFactory · Advanced WooCommerce Product Sales Reporting

  Medium5.3
• CVE-2025-69334

  WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability

  WPFactory · Wishlist for WooCommerce

  Medium6.5
• CVE-2025-62096

  WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

  WPFactory · Maximum Products per User for WooCommerce

  Medium6.5
• CVE-2025-68528

  WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability

  WPFactory · Free Shipping Bar: Amount Left for Free Shipping for WooCommerce

  Medium6.5
• CVE-2025-57911

  WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability

  WPFactory · Adverts

  Medium6.5