Skip to content
OpenAdvisories

Vendor

eMagicOne

5 known vulnerabilities.

Products

eMagicOne Store Manager for WooCommerce 4 eMagicOne Store Manager 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-42773

    WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection. This issue affects eMagicOne Store Manager: from n/a through 1.3.2.

    eMagicOne eMagicOne Store Manager
  • Critical 9.1
    CVE-2025-4603 Public exploit

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion

    The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenti…

    eMagicOne eMagicOne Store Manager for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-5058 Public exploit

    eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()

    The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated at…

    eMagicOne eMagicOne Store Manager for WooCommerce Web / CMS