Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2026/04/13 7:25 p.m.•17 views

CVE-2026-39701

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•35 views

EUVD-2026-20402

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

5.9AI score0.00294EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•12 views

CVE-2026-39701

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

5.3CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•12 views

CVE-2026-39701 WordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

6AI score0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/08 8:30 a.m.•63 views

CVE-2026-39701

CVE-2026-39701 pertains to the WordPress ShopWP plugin (wpshopify) with versions up to and including 5.2.4. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control, allowing unauthorized access. Affected software is Andrew ShopWP/WPSHOPIFY (ShopWP). The ...

5.3CVSS6AI score0.00294EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•39 views

CVE-2026-39701 WordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

5.3CVSS0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•21 views

PT-2026-31263

Name of the Vulnerable Software and Affected Versions Andrew ShopWP versions through 5.2.4 Description Missing authorization allows exploiting incorrectly configured access control security levels. Recommendations Update to a version greater than 5.2.4...

5.8AI score0.00294EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•19 views

WordPress plugin ShopWP 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-39701: Missing Authorization

Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through = 5.2.4...

5.3CVSS5.9AI score0.00294EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-19362

Malware in sbrugna...

7.2CVSS6.4AI score0.00354EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/05 6:14 p.m.•15 views

CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

7.2CVSS6.8AI score0.00354EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/16 7:15 a.m.•14 views

CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

6.1CVSS5.8AI score0.00354EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/16 7:15 a.m.•32 views

CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

7.2CVSS0.00354EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/16 6:43 a.m.•40 views

CVE-2019-25214 ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

7.2CVSS0.00354EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/16 6:43 a.m.•19 views

CVE-2019-25214 ShopWP <= 2.0.4 - Missing Authorization to Stored Cross-Site Scripting

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

7.2CVSS7AI score0.00354EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/16 6:43 a.m.•105 views

CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 2.0.4 . The root cause is a missing capability check on several REST API routes , which allows unauthenticated attackers to call these endpoints. Practical consequences include the ability for...

7.2CVSS6.8AI score0.00354EPSS
SaveIn wildExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/16 12:00 a.m.•1 views

CVE-2019-25214: Missing Authorization

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

7.2CVSS5.7AI score0.00354EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•13 views

WordPress plugin ShopWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.2CVSS6.8AI score0.00354EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2024/10/15 12:00 a.m.•11 views

VulnCheck KEV: CVE-2019-25214

The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for unauthenticated attackers to call the endpoints and perform unauthorized actions such as updating...

7.2CVSS5.7AI score0.00354EPSS
SaveIn wildExploits0References2
Rows per page
Query Builder