Read the docs

emagicone

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

emagicone records in CISA KEV

No emagicone vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Emagicone Store Manager For Woocommerce 4 records MEDIUM

Records

5 records

TI-2025-04534 CVE-2025-5058 · GHSA-3m2v-5hxx-gq9h

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()

Priority MEDIUM 52

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01484 Published 2025-05-24 No fix listed CWE-434
TI-2025-03865 CVE-2025-4336 · GHSA-97qx-x85w-q75v

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()

Priority MEDIUM 45

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01439 Published 2025-05-24 No fix listed CWE-434
TI-2025-04116 CVE-2025-4603 · GHSA-88gp-9664-52xh

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

Priority MEDIUM 42

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01517 Published 2025-05-24 No fix listed CWE-73
Open these records in search →