SH
Vendor
Shopfiles
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-8113 | ES Ebook Store Shopfiles | 6.1 | Aug 16 | The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected… |
| CVE-2024-12262 | ES Ebook Store Shopfiles | 6.1 | Dec 21 | Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step' |
| CVE-2024-11287 | ES Ebook Store Shopfiles | 6.1 | Dec 21 | Ebook Store <= 5.8001 - Reflected Cross-Site Scripting |
| CVE-2023-22701 | ES Ebook Store Shopfiles | 9.8 | Dec 9 | Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebook Store: from n/a… |
| CVE-2024-6567 | ES Ebook Store Shopfiles | 5.3 | Aug 2 | The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001 |
| CVE-2024-23501 | ES Ebook Store Shopfiles | 4.8 | Feb 29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store:… |
| CVE-2023-45602 | ES Ebook Store Shopfiles | 6.1 | Oct 18 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.785 versions |
| CVE-2023-22690 | ES Ebook Store Shopfiles | 4.8 | May 15 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions |