wpshop
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation | wpshop | WordPress | Medium | Fix reported | |
| shop <= 2.6.1 - Unauthenticated Local File Inclusion | wpshop | WordPress | High | No fix reported | |
| WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover | wpshop | WordPress | High | Fix reported | |
| WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload | wpshop | WordPress | Critical | Fix reported | |
| WP shop <= 2.6.0 - Cross-Site Request Forgery to Arbitrary File Upload | wpshop | WordPress | High | No fix reported |