← WordPress Vulnerabilities
WordPress security by component

Product Catalog 8

Product Catalog 8 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 09, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: product-catalog-8

CVE-2016-20065: Product Catalog 8: SQL injection

Product Catalog 8 is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 1.2.0.

PublishedJun 09, 2026
Safe version guidanceSee mitigation notes
Safe version
Jun 09, 2026 CVE-2016-20065
Product Catalog 8: SQL injection
Product Catalog 8 is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 1.2.0.
See mitigation notes
CVE8.8
NVDPending