Vulnerabilities (CVE)

Filtered by vendor Wpshopstyling Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-5468 1 Wpshopstyling 1 Wp E-commerce Shop Styling 2024-02-04 5.0 MEDIUM 7.5 HIGH
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to includes/download.php.
CVE-2013-0724 1 Wpshopstyling 1 Wp-ecommerce-shop-styling 2024-02-04 7.5 HIGH N/A
PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.