Skip to content
OpenAdvisories
Critical · 9.6 CVE-2025-30615 EUVD-2025-7914GHSA-r5wg-rqqj-f266

WordPress WP e-Commerce Style Email plugin <= 0.6.2 - CSRF to Remote Code Execution vulnerability

Published Mar 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jacob Schwartz Product: WP e-Commerce Style Email

Description

Cross-Site Request Forgery (CSRF) vulnerability in Jacob Schwartz WP e-Commerce Style Email wp-e-commerce-style-email allows Code Injection.This issue affects WP e-Commerce Style Email: from n/a through <= 0.6.2.

Affected products

VendorProductAffectedFixed
Jacob Schwartz WP e-Commerce Style Email ≤ 0.6.2 —

References