exploitDog

CVE-2025-32576

Опубликовано: 09 апр. 2025

Источник: nvd

CVSS3: 9.6

EPSS Низкий

Описание

Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop allows Upload a Web Shell to a Web Server. This issue affects WP shop: from n/a through 2.6.0.

Ссылки

https://patchstack.com/database/wordpress/plugin/wpshop/vulnerability/wordpress-wp-shop-plugin-2-6-0-csrf-to-arbitrary-file-upload-vulnerability?_s_id=cve

EPSS

Процентиль: 26%

0.00094

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-352

Связанные уязвимости

GHSA-pjfr-c8m4-mrf9

CVSS3: 9.6

github

10 месяцев назад

Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop allows Upload a Web Shell to a Web Server. This issue affects WP shop: from n/a through 2.6.0.

EPSS

Процентиль: 26%

0.00094

Низкий

9.6 Critical

CVSS3

Дефекты

CWE-352