Cross-site Scripting

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. WordPress eCommerce Product Catalog <3.0.39 - Cross-Site ScriptingCVE-2021-24875Implecode · 1.7% likely

   CWE-79

2. WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)CVE-2023-47839impleCode · CVSS 6.5 · 0.4% likely

   CWE-79

3. WordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-25049impleCode · CVSS 5.9 · 0.4% likely

   CWE-79

4. WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)CVE-2023-29388impleCode · CVSS 7.1 · 0.4% likely

   CWE-79

5. eCommerce Product Catalog plugin for WordPress <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-1470implecode · CVSS 4.4 · 0.4% likely

   CWE-79

6. WordPress eCommerce Product Catalog plugin <= 3.3.32 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-32558impleCode · CVSS 7.1 · 0.4% likely

   CWE-79

7. eCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode AttributeCVE-2026-76128implecode · CVSS 6.4 · 0.4% likely

   CWE-79

8. Product Catalog Simple <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via show_products ShortcodeCVE-2025-1405implecode · CVSS 6.4 · 0.3% likely

   CWE-79

9. WordPress Product Catalog Simple plugin <= 1.8.1 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-49305impleCode · CVSS 6.5 · 0.3% likely

   CWE-79

10. WordPress eCommerce Product Catalog plugin <= 3.5.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-57360impleCode · CVSS 7.1 · 0.3% likely

    CWE-79

11. WordPress Product Catalog Simple Plugin <= 1.8.2 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-58992impleCode · CVSS 6.5 · 0.2% likely

    CWE-79

12. WordPress eCommerce Product Catalog plugin <= 3.6.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-115596impleCode · CVSS 7.1 · 0.2% likely

    CWE-79

13. WordPress eCommerce Product Catalog plugin <= 3.6.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-116851impleCode · CVSS 7.1 · 0.2% likely

    CWE-79

14. WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-105056impleCode · CVSS 6.5 · 0.1% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.