Pluginus

Pluginus develops WordPress plugins focused on e-commerce product management and filtering, including widely adopted tools like Bear and Husky that extend WooCommerce functionality. Its vulnerability profile concentrates on web-application input-handling and authorization weaknesses—cross-site scripting, cross-site request forgery, missing authorization, path traversal, and code injection—reflecting the challenges of server-rendered plugin code that interfaces with user input and WordPress permission models. A meaningful share of disclosures reach serious severity, and vulnerabilities in this vendor's portfolio have a moderate tendency toward public exploit availability. Defenders managing WooCommerce storefronts should prioritize this vendor's updates for store-facing plugins and monitor for post-exploitation artifacts on compromised sites. Current exploitation activity, severity breakdown, and exposure counts are shown alongside this summary.