Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: emagicone Component: Emagicone Store Manager For Woocommerce Clear all filters
TI-2025-04534 CVE-2025-5058 · GHSA-3m2v-5hxx-gq9h

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()

Priority MEDIUM 52

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01484 Published 2025-05-24 No fix listed CWE-434
TI-2025-03865 CVE-2025-4336 · GHSA-97qx-x85w-q75v

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()

Priority MEDIUM 45

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01439 Published 2025-05-24 No fix listed CWE-434
TI-2025-04116 CVE-2025-4603 · GHSA-88gp-9664-52xh

eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

Priority MEDIUM 42

The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01517 Published 2025-05-24 No fix listed CWE-73