Vulnerabilities

TI-2013-06151 CVE-2013-10008 · GHSA-x42v-2793-x54w

sheilazpy eShop sql injection

MEDIUM 43

A vulnerability was found in sheilazpy eShop.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00698 Published 2023-01-06 No fix listed CWE-89

TI-2015-07790 CVE-2015-9413 · GHSA-q3c8-6ww8-9xq4

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the…

LOW 31

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01096 Published 2019-09-25 No fix listed CWE-352

TI-2015-03022 CVE-2015-3421 · GHSA-jxrm-68h4-5mgp

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and…

LOW 30

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which allows remote attackers to perform cross-site scripting (XSS)…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01291 Published 2017-07-21 No fix listed CWE-79

Vulnerabilities

Filters

sheilazpy eShop sql injection

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the…

The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and…