cleantalk
Vulnerabilities and Security Researches

eCommerce Product Catalog Plugin for WordPress, CVE-2025-49331

CVE, Research URL

CVE-2025-49331

Home page URL

Security reports for eCommerce Product Catalog Plugin for WordPress

Application

eCommerce Product Catalog Plugin for WordPress

Published on
Jun 17, 2025
Research Description
Deserialization of Untrusted Data vulnerability in impleCode eCommerce Product Catalog allows Object Injection. This issue affects eCommerce Product Catalog: from n/a through 3.4.3.
Affected versions
Min -, max 3.4.3.
Status
vulnerable
Previous vulnerability researches
Activity Plus Reloaded for BuddyPress (CVE-2025-30957) , Jun 15, 2025
Activity Plus Reloaded for BuddyPress (CVE-2024-11913) , Jan 25, 2025
New vulnerability
CubeWP Forms – LeadGen & Contact Form (CVE-2025-49880) , Jun 20, 2025
WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce und KlickTipp einfach verbinden (CVE-2025-49316) , Jun 20, 2025
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit (CVE-2025-1562) , Jun 20, 2025
eCommerce Product Catalog Plugin for WordPress (CVE-2025-49331) , Jun 20, 2025
Broadstreet (CVE-2025-4652) , Jun 20, 2025