Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

CVE-2015-5468

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to includes/download.php.

CVSS 3.0 · 7.5 High EPSS 37.8% KEV · Not listed
Vendors
Wpshopstyling
Products
Wp E-commerce Shop Styling
CVE-2013-0724

PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.

CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Wpshopstyling
Products
Wp-ecommerce-shop-styling