Wpshopmart

9 CVEs across 6 Wpshopmart products. Browse Wpshopmart vulnerabilities, severities, and proof-of-concept exploits.

Wpshopmart products with known CVEs

ProductCVEs
Coming Soon Page \& Maintenance Mode4
Coming Soon Page & Maintenance Mode3
Tabs Responsive2
Testimonial Builder2
Tabs1
Testimonial (WordPress Plugin)1
Wpshopmart CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65550Medium5.92026-07-23Shop Manager Cross Site Scripting (XSS) in Tabs <= 2.5 versions.
CVE-2024-1136Medium5.32024-02-28The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wps…
CVE-2019-25140High7.22023-06-07The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logo_width, logo_height, rcsp_logo_…
CVE-2019-25139Medium6.52023-06-07The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to miss…
CVE-2021-36857Medium4.82022-08-22Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress.
CVE-2022-1298Medium4.82022-05-23The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to p…
CVE-2021-24598Medium4.82021-11-17The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting at…
CVE-2021-24191High8.82021-05-14Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Maintenance Mode & Site Under Construction WordPress plugin be…
CVE-2018-5312Medium5.42018-01-09The tabs-responsive plugin 1.8.0 for WordPress has XSS via the post_title parameter to wp-admin/post.php.