Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

RealMag777 — Vulnerabilities & Security Advisories 120

Browse all 120 CVE security advisories affecting RealMag777. AI-powered Chinese analysis, POCs, and references for each vulnerability.

realmag777 is a software vendor primarily known for developing and distributing e-commerce solutions and digital marketplace platforms. Historical security audits reveal a pattern of critical vulnerabilities, with 109 CVEs currently on record. The most prevalent flaw classes include Remote Code Execution (RCE) and Cross-Site Scripting (XSS), often stemming from insufficient input validation and improper sanitization of user-supplied data. Additionally, the software has frequently exhibited insecure direct object references and privilege escalation issues, allowing unauthorized users to access sensitive administrative functions or modify system configurations. These defects typically arise from legacy codebases that lack modern security controls and regular patching cycles. Major incidents have involved data breaches exposing customer personal information and payment details due to unpatched SQL injection flaws. The high volume of disclosed vulnerabilities suggests a reactive rather than proactive security posture, requiring immediate attention to code review processes and dependency management to mitigate ongoing risks for enterprise clients relying on this infrastructure.

CVE IDTitleCVSSSeverityPublished
CVE-2026-57409 WordPress Active Products Tables for WooCommerce plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability — Active Products Tables for WooCommerceCWE-79 7.1 High2026-07-13
CVE-2026-57320 WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability — BEARCWE-79 7.1 High2026-06-29
CVE-2026-57319 WordPress FOX plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability — FOXCWE-79 7.1 High2026-06-26
CVE-2026-39574 WordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerability — InPost GalleryCWE-89 9.3 Critical2026-06-16
CVE-2026-9241 FOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' Parameter — FOX – Currency Switcher Professional for WooCommerceCWE-639 4.3 Medium2026-05-28
CVE-2026-42761 WordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerability — Active Products Tables for WooCommerceCWE-89 9.3 Critical2026-05-27
CVE-2026-42755 WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability — TableOnCWE-89 9.3 Critical2026-05-27
CVE-2026-42733 WordPress WPCS plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability — WPCSCWE-79 7.1 High2026-05-27
CVE-2026-42727 WordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerability — Active Products Tables for WooCommerceCWE-89 9.3 Critical2026-05-27
CVE-2026-4094 FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion — FOX – Currency Switcher Professional for WooCommerceCWE-862 8.1 High2026-05-15
CVE-2026-45213 WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability — BEARCWE-89 7.6 High2026-05-12
CVE-2026-1672 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification — BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.NetCWE-352 6.5 Medium2026-04-08
CVE-2026-1673 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion — BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.NetCWE-352 4.3 Medium2026-04-08
CVE-2026-39497 WordPress FOX plugin <= 1.4.5 - SQL Injection vulnerability — FOXCWE-89 7.6 High2026-04-08
CVE-2026-39501 WordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerability — FOXCWE-862 5.3 Medium2026-04-08
CVE-2026-3513 TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute — TableOn – WordPress Posts Table FilterableCWE-79 6.4 Medium2026-04-08
CVE-2026-32458 WordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerability — WOLFCWE-89 7.6 High2026-03-13
CVE-2026-32455 WordPress MDTF plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability — MDTFCWE-79 6.5 Medium2026-03-13
CVE-2026-32450 WordPress Active Products Tables for WooCommerce plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability — Active Products Tables for WooCommerceCWE-79 6.5 Medium2026-03-13
CVE-2025-67990 WordPress GMap Targeting plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability — GMap TargetingCWE-79 7.1 High2026-02-20
CVE-2025-69316 WordPress TableOn plugin <= 1.0.4.2 - Reflected Cross Site Scripting (XSS) vulnerability — TableOnCWE-79 7.1 High2026-01-22
CVE-2025-13110 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr' — HUSKY – Products Filter Professional for WooCommerceCWE-639 4.3 Medium2025-12-18
CVE-2025-13109 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_query/woof_remove_query' — HUSKY – Products Filter Professional for WooCommerceCWE-639 4.3 Medium2025-12-03
CVE-2025-60244 WordPress TableOn plugin <= 1.0.5.1 - Content Injection vulnerability — TableOnCWE-80 7.1 High2025-11-06
CVE-2025-11735 HUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` Parameter — HUSKY – Products Filter Professional for WooCommerceCWE-89 7.5 High2025-10-28
CVE-2025-62964 WordPress MDTF plugin <= 1.3.6 - Broken Access Control vulnerability — MDTFCWE-862 5.3 Medium2025-10-27
CVE-2025-62069 WordPress MDTF plugin <= 1.3.3.8 - Cross Site Scripting (XSS) vulnerability — MDTFCWE-79 6.5 Medium2025-10-22
CVE-2025-49907 WordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerability — MDTFCWE-862 4.3 Medium2025-10-22
CVE-2025-57889 WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability — InPost GalleryCWE-98 7.5 High2025-09-05
CVE-2025-54707 WordPress MDTF Plugin <= 1.3.3.7 - SQL Injection Vulnerability — MDTFCWE-89 9.3 Critical2025-08-14

This page lists every published CVE security advisory associated with RealMag777. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.