Skip to content

Product

elfden eshop plugin vulnerabilities

2 published CVES affecting elfden eshop plugin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest elfden eshop plugin CVEs

Newest publication first

  1. CVE-2016-0769 eShop <= 6.3.14 - Multiple SQL Injections

    Published
    HighCVSS 8.8 EPSS 2.9%

    Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the (2) view, (3) mark...

  2. CVE-2016-0765 eShop <= 6.3.14 - Multiple Cross-Site Scripting

    Published
    MediumCVSS 6.1 EPSS 1.8%

    Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) action parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.