VulnCheck KEV: CVE-2015-5468

Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter to includes/download.php...

WordPress WP e-Commerce Shop Styling Plugin Directory Traversal Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plug-ins used to improve the style of WP e-commerce store templates. A...

CVE-2015-5468

A directory traversal vulnerability exists in the WP e-Commerce Shop Styling plugin for WordPress (versions before 2.6 ). The root cause is an improper limitation of a pathname within ./wp-ecommerce-shop-styling/includes/download.php, where user input from the filename parameter is not properly s...

WordPress WP e-Commerce Shop Styling Plugin Arbitrary File Download Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up a personal blog site.WP e-Commerce Shop Styling is one of the plugin used to improve the style of WP e-commerce store templates. An...

WordPress WP ecommerce Shop Styling 'dompdf' Remote File Inclusion Vulnerability

WordPress WP ecommerce Shop Styling Plugin is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

CVE-2013-0724

PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter...