Plugin icon

WPshop 2 – E-Commerce

wpshop

Vulnerabilities:

5

Last Updated:

May 16, 2025

Active Installs:

100

Published
Title
Fixed in
CVSS
Published
2026-02-09
Title
shop <= 2.6.1 - Unauthenticated Local File Inclusion
Fixed in
No known fix
CVSS
8.1 (high)
Published
2025-05-06
Title
WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Fixed in
Fixed in 2.6.1
CVSS
8.8 (high)
Published
2025-05-06
Title
WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation
Fixed in
Fixed in 2.6.1
CVSS
5.4 (medium)
Published
2025-04-09
Title
WP shop <= 2.6.1 - Arbitrary File Upload via CSRF
Fixed in
No known fix
CVSS
8.8 (high)
Published
2015-03-09
Title
Wpshop - eCommerce <= 1.3.9.5 - Arbitrary File Upload
Fixed in
Fixed in 1.3.9.6
CVSS
n/a