3.3.9

DATE	CVE	VULNERABILITY TITLE	RISK
2023-12-29	CVE-2023-51688	Unspecified vulnerability in Implecode Ecommerce Product Catalog Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress.This issue affects eCommerce Product Catalog Plugin for WordPress: from n/a through 3.3.26. network low complexity implecode	7.5
2023-12-04	CVE-2023-5979	Cross-Site Request Forgery (CSRF) vulnerability in Implecode Ecommerce Product Catalog The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products network low complexity implecode CWE-352	6.5
2023-11-23	CVE-2023-47839	Cross-site Scripting vulnerability in Implecode Ecommerce Product Catalog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog Plugin for WordPress plugin <= 3.3.26 versions. network low complexity implecode CWE-79	5.4