Sainwp Onestore Sites

2 CVEs affecting Sainwp Onestore Sites. Latest disclosed: 2025-02-27. Critical: 1, High: 0.

Top CVEs affecting Sainwp Onestore Sites
CVESeverityScorePublishedSummary
CVE-2025-25107Critical9.62025-02-07Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites onestore-sites allows Cross Site Request Forgery.This issue affects OneStore Sites: fr…
CVE-2024-13905Medium5.32025-02-27The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file…