Description
Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities in WP Shop plugin <= 3.9.6 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wp-shop.ru | WP Shop (WordPress plugin) | <= 3.9.6 – ≤ 3.9.6 | — |
Medium · 6.5
CVE-2022-36793
EUVD-2022-39493GHSA-m3pr-2cjq-7j6v
WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities
Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack