CVE-2026-39701

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

CVE-2025-9115: Undefined Security Weakness

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

WP Shop <= 3.4.3.18 - Cross-Site Scripting (XSS) & CSRF

The WP Shop WordPress plugin was affected by a Cross-Site Scripting XSS & CSRF security vulnerability...