empik

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

empik records in CISA KEV

No empik vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-23633 CVE-2025-32568 · GHSA-xj3x-8j85-rxjv

WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability

MEDIUM 51

Deserialization of Untrusted Data vulnerability in empik EmpikPlace for Woocommerce empik-for-woocommerce allows Object Injection.This issue affects EmpikPlace for Woocommerce: from n/a through <= 1.4.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00913 Published 2025-04-11 No fix listed CWE-502

TI-2026-08558 CVE-2026-9766 · GHSA-j95r-4g94-87j7

Missing authorization in Empik for Woocommerce

LOW 20

The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00403 Published 2026-09-19 No fix listed CWE-862

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0