1.1.3

DATE	CVE	VULNERABILITY TITLE	RISK
2025-02-28	CVE-2025-1405	Cross-site Scripting vulnerability in Implecode Product Catalog Simple The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_products shortcode in all versions up to, and including, 1.7.11 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity implecode CWE-79	5.4
2023-12-29	CVE-2023-51687	Unspecified vulnerability in Implecode Product Catalog Simple Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue affects Product Catalog Simple: from n/a through 1.7.6. network low complexity implecode	7.5
2023-07-01	CVE-2020-36743	Unspecified vulnerability in Implecode Product Catalog Simple The Product Catalog Simple plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.13. network low complexity implecode	4.3
2023-04-07	CVE-2023-29388	Unspecified vulnerability in Implecode Product Catalog Simple Unauth. network low complexity implecode	6.1