Vendors / omnishop Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now omnishop records in CISA KEV No omnishop vulnerabilities are listed in CISA KEV.
Priority LOW 30
The Omnishop plugin for WordPress is vulnerable to Unauthenticated Registration Bypass in all versions up to, and including, 1.0.9.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00301 · Published 2025-07-23 · No fix listed CWE-862
Priority LOW 28
The Omnishop plugin for WordPress is vulnerable to Cross-Site Request Forgery on its /users/delete REST route in all versions up to, and including, 1.0.9.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00178 · Published 2025-07-23 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 0 2 0 0
