CVE-2015-9413

The CVE-2015-9413 issue affects the WordPress eShop plugin (versions up to 6.3.13). The vulnerability is a CSRF that can cause a reflected XSS via the parameter title in wp-admin/admin.php?page=eshop-downloads.php. The root cause is CSRF enabling an attacker to induce unintended requests that, un...

CVE-2015-3421

CVE-2015-3421 affects the WordPress eShop plugin (

CVE-2013-10008

CVE-2013-10008 affects the sheilazpy eShop application. A vulnerability exists where manipulation of an unknown function leads to a SQL injection, described as critical. The fix is identified by patch/file hash e096c5849c4dc09e1074104531014a62a5413884. Public references indicate this vulnerabilit...