WordPress plugin
Actionwear products sync security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Actionwear products sync vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤2.3.3No patch available | CVE-2025-49350 | |
| Medium6.5 | Authenticated (Subscriber+) SQL Injection <3.1.13Update to 3.1.13 | CVE-2025-31619 | |
| Medium5.3 | Unauthenticated Full Patch Disclosure ≤2.3.2Update to 2.3.3 | CVE-2024-13535 |
- Medium4.3Missing Authorization
≤2.3.3No patch available
- Medium6.5Authenticated (Subscriber+) SQL Injection
<3.1.13Update to 3.1.13
- Medium5.3Unauthenticated Full Patch Disclosure
≤2.3.2Update to 2.3.3
Actionwear products sync: common questions
Does Actionwear products sync have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Actionwear products sync: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Actionwear products sync I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Actionwear products sync vulnerability?
CVE-2025-49350, published Dec 6, 2025: Actionwear products sync <= 2.3.3 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Actionwear products sync vulnerability listed in CISA KEV?
No. None of the known Actionwear products sync vulnerabilities is currently listed in the CISA KEV catalog.