CVE-2016-0769

CVE-2016-0769 affects the WordPress eShop plugin (version 6.3.14) via SQL injection in eshop-orders.php. The vulnerability allows (1) remote administrators to execute arbitrary SQL through the delid parameter and (2) remote authenticated users to inject SQL via the view, mark, or change parameter...

CVE-2016-0765

The CVE-2016-0765 entry describes multiple XSS vulnerabilities in eshop-orders.php within the WordPress eShop plugin, version 6.3.14. The issue allows remote attackers to inject arbitrary script/HTML via the page or action parameters, indicating a reflected or stored XSS vector in the eshop-order...