Skip to content
OpenAdvisories

Product · andrewmrobbins

ShopWP

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2019-25214

    ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting

    The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform …

    andrewmrobbins ShopWP Web / CMS