Extension WordPress

Vulnérabilités StoreEngine , Complete eCommerce Solution with Memberships, Licensing, Affiliates & More

Cette page rassemble les failles publiées pour StoreEngine , Complete eCommerce Solution with Memberships, Licensing, Affiliates & More, leurs plages de versions affectées et les correctifs signalés dans la base locale.

2Vulnérabilités
0Critiques
2Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de StoreEngine , Complete eCommerce Solution with Memberships, Licensing, Affiliates & More

2 fiches

CVE-2025-9216 Élevée · 8,8
StoreEngine , Complete eCommerce Solution with Memberships, Licensing, Affiliates & More

StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 – Authenticated (Subscriber+) Arbitrary File Upload

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import() function in all versions up to,…

Versions affectées

*-1.5.0

Correctif

1.5.1

Publication

16/09/2025

CVE-2025-9215 Moyenne · 6,5
StoreEngine , Complete eCommerce Solution with Memberships, Licensing, Affiliates & More

StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 – Authenticated (Subscriber+) Arbitrary File Download

The StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the file_download() function. This makes it possible…

Versions affectées

*-1.5.0

Correctif

1.5.1

Publication

16/09/2025

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités