CVE Tools
Track your stack

Wpfactory

26 CVEs tracked since 2024. Since Oct 2024, none of them reached CISA KEV.

Wpfactory CVEs per month

Oct 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wpfactory CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-1050
2024-114 or fewer
2024-1240
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-0460
2025-05110
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wpfactory's monthly top three, with their CVEs summed over those months.

  1. Additional Custom Emails & Recipients For Woocommerce11 month
  2. Additional Custom Product Tabs For Woocommerce11 month
  3. Advanced Woocommerce Product Sales Reporting11 month
  4. Adverts11 month
  5. Awesome Shortcodes11 month
  6. Back Button Widget11 month
  7. Change Add To Cart Button Text For Woocommerce11 month
  8. Cost of Goods For Woocommerce11 month
  9. Maximum Products Per User For Woocommerce11 month
  10. Products\, Order \& Customers Export For Woocommerce11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wpfactory.

  1. CVE-2026-112866WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability9.3
  2. CVE-2026-93771WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability7.2
  3. CVE-2026-39437WordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1
  4. CVE-2026-24993WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability9.3
  5. CVE-2026-23977WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability7.5
  6. CVE-2026-24992WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerability5.3
  7. CVE-2025-69334WordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability6.5
  8. CVE-2025-62096WordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability6.5
  9. CVE-2025-68528WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability6.5
  10. CVE-2025-57911WordPress Adverts Plugin <= 1.4 - Cross Site Scripting (XSS) Vulnerability6.5
  11. CVE-2025-57972WordPress Helpdesk Support Ticket System for WooCommerce plugin <= 2.1.1 - Broken Access Control vulnerability4.3
  12. CVE-2025-58985WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability6.5
  13. CVE-2025-49887WordPress Product XML Feed Manager for WooCommerce Plugin <= 2.9.3 - Remote Code Execution (RCE) Vulnerability9.9
  14. CVE-2025-30959WordPress Product XML Feed Manager for WooCommerce <= 2.9.2 - Broken Access Control Vulnerability6.5
  15. CVE-2025-49319WordPress Wishlist for WooCommerce <= 3.2.3 - Broken Access Control Vulnerability6.5

The record

Peak rank
#79 in May 2025
Busiest month shown
May 2025, 11 CVEs
Months with a KEV entry
0 since Oct 2024
Monthly snapshots
4 since 2024
Wpfactory's full record, month by month