Now officially on WordPress.org

CVE Database / CVE-2026-57360

CVE · High

CVE-2026-57360 — eCommerce Product Catalog [ecommerce-product-catalog] < 3.5.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-57360 eCommerce Product Catalog [ecommerce-product-catalog] < 3.5.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') High 7.1 < 3.5.5 3.5.5 2026-07-01 —

CVE-2026-57360

The eCommerce Product Catalog Plugin for WordPress contains a security flaw in versions up to 3.5.4, allowing malicious code to be embedded into the plugin's output without proper filtering. This vulnerability enables unauthenticated attackers to inject arbitrary scripts onto pages that will run when accessed by users, potentially leading to unauthorized actions or data exposure.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings