Vulnerabilities / CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce
CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce vulnerabilities
Advisories WPSec published for CatalogX Product Catalog, Product Enquiry & Quotes for WooCommerce. Other sources may list more. Its attack surface: CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0578 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce <= 6.1.5 - Unauthenticated Insecure Direct Object Reference to Arbitrary Order Status Modification via 'orderId' Parameter | Medium 5.3 | 6.1.6 |
License: CC BY 4.0