Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: eoxia Clear all filters
TI-2026-01988 CVE-2026-2351 · GHSA-3754-c64r-8c26

Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read

Priority LOW 28

The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callback_get_text_from_url() function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00268 Published 2026-03-21 No fix listed CWE-73
TI-2015-08063 CVE-2015-10135 · GHSA-943m-x5xx-45qh

WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

Priority MEDIUM 56

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04605 Published 2025-07-19 Fixed in 1.3.9.6 CWE-434
TI-2025-03402 CVE-2025-3853 · GHSA-pvmq-85f5-2wf6

Authorization bypass in eoxia WPshop 2 – E-Commerce

Priority LOW 34

The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 2.0.0 to 2.6.0 via the callback_generate_api_key() due to missing validation on a user controlled key.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00248 Published 2025-05-07 No fix listed CWE-639