Skip to content
OpenAdvisories

Vendor

eoxia

5 known vulnerabilities.

Products

WPshop 2 – E-Commerce 3 Task Manager 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-3852

    WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

    The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.0 to 2.6.0. This is due to the plugin not properly validating a user's identity prior to updating their details like email & password thr…

    eoxia WPshop 2 – E-Commerce Web / CMS