What’s Vulnerable › Vulnerabilities

CVE-2025-13252: shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-16 · updated 2026-10-18
• Weakness: CWE-259

Description

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.

Affected products

• shsuishang ShopSuite ModulithShop: 45a99398cec3b7ad7ff9383694f0b53339f2d35a

References

• https://github.com/shsuishang/modulithshop/issues/2
• https://github.com/shsuishang/modulithshop/issues/2#issue-3580272472
• https://vuldb.com/?ctiid.332587
• https://vuldb.com/?id.332587
• https://vuldb.com/?submit.687685

Get alerted when CVE-2025-13252 or the next vulnerability affects your stack