Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

realmag777 — Vulnerabilities & Security Advisories 122

Browse all 122 CVE security advisories affecting realmag777. AI-powered Chinese analysis, POCs, and references for each vulnerability.

realmag777 is a software vendor primarily known for developing and distributing e-commerce solutions and digital marketplace platforms. Historical security audits reveal a pattern of critical vulnerabilities, with 109 CVEs currently on record. The most prevalent flaw classes include Remote Code Execution (RCE) and Cross-Site Scripting (XSS), often stemming from insufficient input validation and improper sanitization of user-supplied data. Additionally, the software has frequently exhibited insecure direct object references and privilege escalation issues, allowing unauthorized users to access sensitive administrative functions or modify system configurations. These defects typically arise from legacy codebases that lack modern security controls and regular patching cycles. Major incidents have involved data breaches exposing customer personal information and payment details due to unpatched SQL injection flaws. The high volume of disclosed vulnerabilities suggests a reactive rather than proactive security posture, requiring immediate attention to code review processes and dependency management to mitigate ongoing risks for enterprise clients relying on this infrastructure.

CVE ID Title CVSS Severity Published
CVE-2024-8623 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Unauthenticated Arbitrary Shortcode Execution — MDTF – Meta Data and Taxonomies Filter CWE-94 7.3 High 2024-09-24
CVE-2024-8624 MDTF – Meta Data and Taxonomies Filter <= 1.3.3.3 - Authenticated (Contributor+) SQL Injection — MDTF – Meta Data and Taxonomies Filter CWE-89 9.9 Critical 2024-09-24
CVE-2024-8271 FOX – Currency Switcher Professional for WooCommerce <= 1.4.2.1 - Unauthenticated Arbitrary Shortcode Execution — FOX – Currency Switcher Professional for WooCommerce CWE-94 7.3 High 2024-09-14
CVE-2024-43121 WordPress HUSKY plugin <= 1.3.6.1 - Privilege Escalation vulnerability — HUSKY CWE-269 9.1 Critical 2024-08-13
CVE-2024-6457 HUSKY - Products Filter Professional for WooCommerce <= 1.3.6 - Unauthenticated Time-Based SQL Injection — HUSKY – Products Filter Professional for WooCommerce CWE-89 9.8 Critical 2024-07-16
CVE-2024-38700 WordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerability — WPCS CWE-74 6.5 Medium 2024-07-12
CVE-2024-32818 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerability — WordPress Meta Data and Taxonomies Filter (MDTF) CWE-862 4.3 Medium 2024-06-09
CVE-2024-35730 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.3 - Reflected Cross Site Scripting (XSS) vulnerability — Active Products Tables for WooCommerce CWE-79 7.1 High 2024-06-08
CVE-2024-5039 HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — HUSKY – Products Filter Professional for WooCommerce CWE-79 6.4 Medium 2024-05-29
CVE-2024-34434 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3.2 - Arbitrary Shortcode Execution vulnerability — WordPress Meta Data and Taxonomies Filter (MDTF) CWE-863 6.5 Medium 2024-05-17
CVE-2024-34558 WordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability — WOLF CWE-79 5.9 Medium 2024-05-08
CVE-2024-3734 FOX – Currency Switcher Professional for WooCommerce <= 1.4.1.8 - Unauthenticated Arbitrary Shortcode Execution — FOX – Currency Switcher Professional for WooCommerce CWE-94 6.5 Medium 2024-05-02
CVE-2024-32691 WordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerability — Active Products Tables for WooCommerce CWE-862 5.3 Medium 2024-04-22
CVE-2024-31430 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins — WOLF – WordPress Posts Bulk Editor and Manager Professional CWE-352 4.3 Medium 2024-04-10
CVE-2024-30462 WordPress HUSKY plugin <= 1.3.5.1 - Cross Site Request Forgery (CSRF) vulnerability — HUSKY – Products Filter for WooCommerce (formerly WOOF) CWE-352 4.3 Medium 2024-03-29
CVE-2024-30463 WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability — BEAR CWE-862 4.3 Medium 2024-03-29
CVE-2024-30456 WordPress WPCS – WordPress Currency Switcher Professional plugin <=1.2.0.1 - Cross Site Request Forgery (CSRF) vulnerability — WPCS CWE-352 4.3 Medium 2024-03-29
CVE-2024-30457 WordPress MDTF plugin <= 1.3.3.1 - Cross Site Request Forgery (CSRF) vulnerability — WordPress Meta Data and Taxonomies Filter (MDTF) CWE-352 4.3 Medium 2024-03-29
CVE-2024-30458 WordPress FOX – Currency Switcher Professional for WooCommerce plugin <= 1.4.1.7 - Cross Site Request Forgery (CSRF) vulnerability — WOOCS – WooCommerce Currency Switcher CWE-352 4.3 Medium 2024-03-29
CVE-2024-3061 HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion — HUSKY – Products Filter Professional for WooCommerce CWE-98 7.2 High 2024-03-29
CVE-2024-30200 WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability — BEAR CWE-79 7.1 High 2024-03-28
CVE-2024-29763 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability — WordPress Meta Data and Taxonomies Filter (MDTF) CWE-79 7.1 High 2024-03-27
CVE-2024-29932 WordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability — WordPress Meta Data and Taxonomies Filter (MDTF) CWE-79 6.5 Medium 2024-03-27
CVE-2024-29906 WordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability — WordPress Meta Data and Taxonomies Filter (MDTF) CWE-79 5.9 Medium 2024-03-27
CVE-2024-24835 WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability — BEAR CWE-862 4.3 Medium 2024-03-23
CVE-2023-50861 WordPress HUSKY plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability — HUSKY – Products Filter for WooCommerce (formerly WOOF) CWE-352 4.3 Medium 2024-03-15
CVE-2024-1795 HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.2 - Authenticated (Contributor+) SQL Injection — HUSKY – Products Filter Professional for WooCommerce CWE-89 8.8 High 2024-03-15
CVE-2024-1796 HUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — HUSKY – Products Filter Professional for WooCommerce CWE-79 6.4 Medium 2024-03-15
CVE-2023-51480 WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS) — Active Products Tables for WooCommerce. Professional products tables for WooCommerce store CWE-79 6.5 Medium 2024-02-10
CVE-2024-24834 WordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS) — BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net CWE-79 5.9 Medium 2024-02-08

This page lists every published CVE security advisory associated with realmag777. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.