Plugin icon

ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets

shopengine

Vulnerabilities:

7

Last Updated:

September 13, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-09-14
Title
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets < 4.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter
Fixed in
Fixed in 4.9.6
CVSS
5.5 (medium)
Published
2026-08-24
Title
ShopEngine < 4.9.5 - Shop Manager+ Privilege Escalation via WXR Import
Fixed in
Fixed in 4.9.5
CVSS
7.2 (high)
Published
2026-08-11
Title
ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication
Fixed in
Fixed in 4.9.3
CVSS
5.4 (medium)
Published
2025-12-02
Title
ShopEngine < 4.8.6 - Cross-Site Request Forgery to Wishlist Manipulation
Fixed in
Fixed in 4.8.6
CVSS
4.3 (medium)
Published
2025-10-24
Title
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution < 4.8.5 - Incorrect Authorization to Authenticated (Editor+) License Status Update
Fixed in
Fixed in 4.8.5
CVSS
2.7 (low)
Published
2025-09-25
Title
ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution < 4.8.4 - Insufficient Authorization to Authenticated (Editor+) Settings Update
Fixed in
Fixed in 4.8.4
CVSS
2.7 (low)
Published
2023-04-19
Title
ShopEngine < 4.1.2 - CSRF
Fixed in
Fixed in 4.1.2
CVSS
5.4 (medium)