WordPress plugin
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium5
- Low0
All EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤5.4.6Update to 5.4.7 | CVE-2025-48249 | |
| Medium4.3 | Missing Authorization ≤5.3.5Update to 5.4.0 | CVE-2025-22673 | |
| High7.2 | Authenticated (Shop Manager+) Arbitrary Options Update ≤4.8.9Update to 4.9.0 | CVE-2024-34370 | |
| Medium4.3 | Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode ≤4.9.2Update to 4.9.3 | CVE-2023-6897 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode ≤4.9.2Update to 4.9.3 | CVE-2023-6892 | |
| Medium6.4 | Authenticated (Contributor+ )Stored Cross-Site Scripting via Shortcode ≤4.4.2Update to 4.4.3 | CVE-2023-0062 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.4.6Update to 5.4.7
- Medium4.3Missing Authorization
≤5.3.5Update to 5.4.0
- High7.2Authenticated (Shop Manager+) Arbitrary Options Update
≤4.8.9Update to 4.9.0
- Medium4.3Insecure Direct Object Reference to Sensitve Information Exposure via Shortcode
≤4.9.2Update to 4.9.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via alg_wc_ean_product_meta Shortcode
≤4.9.2Update to 4.9.3
- Medium6.4Authenticated (Contributor+ )Stored Cross-Site Scripting via Shortcode
≤4.4.2Update to 4.4.3
EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory: common questions
Does EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory: 1 high, 5 medium. None are known to affect version null.
How do I check which version of EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory vulnerability?
CVE-2025-48249, published May 19, 2025: EAN for WooCommerce <= 5.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory vulnerability listed in CISA KEV?
No. None of the known EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory vulnerabilities is currently listed in the CISA KEV catalog.
