Skip to content
OpenAdvisories

Vendor

wpshopmart

6 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 5.9

    WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

    Shop Manager Cross Site Scripting (XSS) in Tabs <= 2.5 versions.

  • Medium 5.3

    Coming Soon Page & Maintenance Mode <= 2.2.1 - Maintenance Mode Bypass

    The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsm_coming_soon_redirect function in all versions up to, and including, 2.2.1. This makes it possible …

  • Medium 6.5

    Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset

    The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to missing capability checks in the ~/functions/data-reset-post.php file which makes it possible for unauth…

  • Medium 4.8

    WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress.