Skip to content
OpenAdvisories

Vendor

eoxia

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2015-10135 Public exploit

    WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload

    The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on…