StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More vulnerabilities

Product

StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More

by kodezen · last CVE Aug 16, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 0High 1Medium 2Low 0

Severity

All severities3 Critical0 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-15056	6.5	1%	Aug 16	StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL Affected: through 2.1.1
CVE-2025-9215	6.5	1%	Sep 17	StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download Affected: through 1.5.0