Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Agence web Eoxia - Montpellier Clear all filters
TI-2025-42826 CVE-2025-69383 · GHSA-rw2x-9m7j-wvrx

WordPress WP shop plugin <= 2.6.1 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Agence web Eoxia - Montpellier WP shop wpshop allows PHP Local File Inclusion.This issue affects WP…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00408 Published 2026-02-20 No fix listed CWE-98
TI-2025-37444 CVE-2025-60078 · GHSA-wx63-mj63-fc8q

WordPress Task Manager plugin <= 3.0.2 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Agence web Eoxia – Montpellier Task Manager task-manager allows PHP Local File Inclusion.This issue…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00458 Published 2025-12-18 No fix listed CWE-98
TI-2025-23641 CVE-2025-32576 · GHSA-pjfr-c8m4-mrf9

WordPress WP shop plugin <= 2.6.1 - CSRF to Arbitrary File Upload vulnerability

Priority MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop wpshop allows Upload a Web Shell to a Web Server.This issue affects WP shop: from n/a through <= 2.6.1.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00268 Published 2025-04-09 No fix listed CWE-352