Eshop Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Eshop Project records in CISA KEV

No Eshop Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eshop 3 records MEDIUM

Records

3 records in Eshop · all components

TI-2013-06151 CVE-2013-10008 · GHSA-x42v-2793-x54w

sheilazpy eShop sql injection

MEDIUM 43

A vulnerability was found in sheilazpy eShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00698 Published 2023-01-06 No fix listed CWE-89

TI-2015-07790 CVE-2015-9413 · GHSA-q3c8-6ww8-9xq4

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the…

LOW 31

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01096 Published 2019-09-25 No fix listed CWE-352

TI-2015-03022 CVE-2015-3421 · GHSA-jxrm-68h4-5mgp

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and…

LOW 30

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform cross-site scripting (XSS)…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01291 Published 2017-07-21 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0