Eshop Project Eshop
3 CVEs affecting Eshop Project Eshop. Latest disclosed: 2023-01-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9413 | Medium | 6.5 | 2019-09-26 | The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter. |
CVE-2015-3421 | Medium | 6.1 | 2017-07-21 | The eshop_checkout function in checkout.php in the Wordpress Eshop plugin 6.3.11 and earlier does not validate variables in the "eshopcart" HTTP cookie, which… |
CVE-2013-10008 | Medium | 5.5 | 2023-01-06 | A vulnerability was found in sheilazpy eShop. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. The… |