Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-122673 2 Wordpress-extensions, Wpmet 2 Shopengine, Shopengine 2026-11-10 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ShopEngine shopengine allows Stored XSS.This issue affects ShopEngine: from n/a through 4.9.8.
CVE-2022-45371 1 Wpmet 1 Shopengine 2025-01-08 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in Wpmet ShopEngine plugin <= 4.1.1 versions.