Read the docs

eoxia

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

eoxia records in CISA KEV

No eoxia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpshop 2 1 record MEDIUM

Records

5 records

TI-2015-08063 CVE-2015-10135 · GHSA-943m-x5xx-45qh

WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

Priority MEDIUM 56

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04605 Published 2025-07-19 Fixed in 1.3.9.6 CWE-434
TI-2025-03402 CVE-2025-3853 · GHSA-pvmq-85f5-2wf6

Authorization bypass in eoxia WPshop 2 – E-Commerce

Priority LOW 34

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 2.0.0 to 2.6.0 via the callback_generate_api_key() due to missing validation on a user controlled key.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00248 Published 2025-05-07 No fix listed CWE-639
TI-2026-01988 CVE-2026-2351 · GHSA-3754-c64r-8c26

Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read

Priority LOW 28

The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callback_get_text_from_url() function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00268 Published 2026-03-21 No fix listed CWE-73
Open these records in search →