CVE Tools
Track your stack

Pluginus

43 CVEs tracked since 2023. Since Jun 2023, none of them reached CISA KEV.

Pluginus CVEs per month

Jun 2023 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Pluginus CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2023-0650
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-10130
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-0270
2024-03140
2024-044 or fewer
2024-055 or fewer
2024-064 or fewer
2024-074 or fewer
2024-084 or fewer
2024-0940
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Pluginus's monthly top three, with their CVEs summed over those months.

  1. Bear - Woocommerce Bulk Editor and Products Manager Professional153 months
  2. Husky - Products Filter Professional For Woocommerce62 months
  3. WordPress Meta Data and Taxonomies Filter62 months
  4. Wolf - WordPress Posts Bulk Editor and Products Manager Professional42 months
  5. Woot31 month
  6. WordPress Currency Switcher Professional31 month
  7. Fox - Currency Switcher Professional For Woocommerce11 month
  8. Wolf - WordPress Posts Bulk Editor and Manager Professional11 month
  9. WordPress Currency Switcher11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Pluginus.

  1. CVE-2025-5143TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode6.4
  2. CVE-2025-3748Taxonomy Chain Menu <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via pn_chain_menu Shortcode6.4
  3. CVE-2025-1661HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion9.8
  4. CVE-2025-0864Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.6 - Reflected Cross-Site Scripting6.1
  5. CVE-2025-26775WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability5.9
  6. CVE-2025-24605WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability4.9
  7. CVE-2024-13340MDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
  8. CVE-2024-12030MDTF – Meta Data and Taxonomies Filter <= 1.3.3.5 - Authenticated (Contributor+) SQL Injection6.5
  9. CVE-2023-40334WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability4.3
  10. CVE-2024-11002InPost Gallery <= 2.1.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via inpost_gallery_get_shortcode_template6.3
  11. CVE-2024-11400HUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax Parameter6.1
  12. CVE-2024-52396WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability4.9
  13. CVE-2024-10168Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode6.4
  14. CVE-2024-50451WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Cross Site Scripting (XSS) vulnerability6.5
  15. CVE-2024-50450WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.4 - Bypass Vulnerability vulnerability7.3

The record

Peak rank
#53 in Mar 2024
Busiest month shown
Mar 2024, 14 CVEs
Months with a KEV entry
0 since Jun 2023
Monthly snapshots
5 since 2023
Pluginus's full record, month by month