Wpshop

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wpshop records in CISA KEV

No Wpshop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Shopwp 1 record LOW

Records

1 record

TI-2019-15268 CVE-2019-25214 · GHSA-2mqj-cxf5-rfwr

ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting

LOW 38

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00354 Published 2024-10-16 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0