Skip to content
OpenAdvisories

Vendor

sainwp

2 known vulnerabilities.

Products

OneStore Sites 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-13905

    OneStore Sites <= 0.1.1 - Unauthenticated Blind Server-Side Request Forgery

    The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations or…

    sainwp OneStore Sites Web / CMS