[■] Plugin de WordPress

ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

8 expedientes en el radar

Comprueba tu versión de ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets Sólo las que se están explotando

[■] Registro

Vulnerabilidades (8)

6,4 Media

CVE-2026-122673: cross-site scripting (XSS) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2026-122673

T−7d 7 nov. 2026
6,4 Media

CVE-2026-85575: cross-site scripting (XSS) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2026-85575

T−61d 14 sept. 2026
7,2 Alta

CVE-2026-75971: gestión incorrecta de privilegios en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2026-75971

T−81d 25 ago. 2026
4,3 Media

CVE-2026-19088: falsificación de peticiones (CSRF) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2026-19088

T−95d 11 ago. 2026
4,3 Media

CVE-2025-12358: falsificación de peticiones (CSRF) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2025-12358

T−346d 3 dic. 2025
2,7 Baja

CVE-2025-11888: autorización incorrecta en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2025-11888

T−386d 24 oct. 2025
2,7 Baja

CVE-2025-10173: falta de autorización en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2025-10173

T−415d 25 sept. 2025
5,4 Media

CVE-2022-45371: falsificación de peticiones (CSRF) en ShopEngine – All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets

CVE-2022-45371

T−1305d 19 abr. 2023