WP Desk ShopMagic vulnerabilities

Latest WP Desk ShopMagic CVEs

Newest publication first

1. CVE-2026-114195 WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability

   Published 2026-10-22

   Medium·CVSS 5.3 EPSS 0.27%

   Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects ShopMagic: from n/a through 4.9.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.