Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-114195 EUVD-2026-108078GHSA-hrp8-8wqc-wrrg

WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability

Published Oct 22, 2026 · Updated Oct 22, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through 4.9.1.

Affected products

VendorProductAffectedFixed
WP Desk ShopMagic ≤ 4.9.1 —

References