What’s Vulnerable › Products

eoxia WPshop 2 – E-Commerce vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your eoxia WPshop 2 – E-Commerce version is affected

Latest eoxia WPshop 2 – E-Commerce vulnerabilities

• CVE-2015-10135 — WPshop 2 – E-Commerce < 1.3.9.6 - Arbitrary File Upload (CVSS 9.8)
• CVE-2025-3853 — WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation (CVSS 6.5)
• CVE-2025-3852 — WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover (CVSS 8.8)