Wpshop

wpshop

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Shopwp

shopwp

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-25214 1Wpshop 1Shopwp Jun 17, 2026 Oct 16, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attac...Show more The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating the plugin's settings and injecting malicious scripts.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2019-25214

1Wpshop

1Shopwp

Jun 17, 2026

Oct 16, 2024

N/A· v4

6.1 MEDIUM· v3

N/A· v2

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating the plugin's settings and injecting malicious scripts.Show less