Extension WordPress
Vulnérabilités Omnishop – Mobile shop apps complementing your WooCommerce webshop
Cette page rassemble les failles publiées pour Omnishop – Mobile shop apps complementing your WooCommerce webshop, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Omnishop – Mobile shop apps complementing your WooCommerce webshop
2 fiches
Omnishop <= 1.0.9 – Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint
The Omnishop plugin for WordPress is vulnerable to Cross-Site Request Forgery on its /users/delete REST route in all versions up to, and including, 1.0.9. The route’s permission_callback only verifies that the requester is logged in, but fails to…
*-1.0.9
Non indiqué
22/07/2025
Omnishop <= 1.0.9 – Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint
The Omnishop plugin for WordPress is vulnerable to Unauthenticated Registration Bypass in all versions up to, and including, 1.0.9. Its /users/register endpoint is exposed to the public (permission_callback always returns true) and invokes wp_create_user() unconditionally, ignoring the site’s…
*-1.0.9
Non indiqué
22/07/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.