Wpmet ShopEngine vulnerabilities (CVE)

CVE records published for Wpmet ShopEngine, newest first. Follow to get an email when a new one appears.

2 results

6.5Medium

CVE-2026-122673 14 hours ago

WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability

Wpmet ShopEngine

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ShopEngine shopengine allows Stored XSS.This issue affects ShopEngine: from n/a through 4.9.8.

5.4Medium

CVE-2022-45371 3 years ago

WordPress ShopEngine Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

Wpmet ShopEngine

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet ShopEngine plugin <= 4.1.1 versions.