emagicone records
4 published records for vendor emagicone.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-73 External Control of File Name or Path2
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-5058Proof of concept | eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()emagicone · emagicone store manager for woocommerce · CWE-434 | Critical9.8 | — | 1.4% | May 24, 2025 |
39Monitor | CVE-2025-4336Proof of concept | eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()emagicone · emagicone store manager for woocommerce · CWE-434 | Critical9.8 | — | 1.4% | May 24, 2025 |
36Monitor | CVE-2025-4603Proof of concept | eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletionemagicone · emagicone store manager for woocommerce · CWE-73 | Critical9.1 | — | 1.5% | May 24, 2025 |
30Monitor | CVE-2025-4602Proof of concept | eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Reademagicone · emagicone store manager for woocommerce · CWE-73 | High7.5 | — | 0.7% | May 24, 2025 |
- CVE-2025-505839Monitor
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()
CriticalCVSS 9.8Proof of conceptEPSS 1%emagicone · emagicone store manager for woocommerceMay 24, 2025
- CVE-2025-433639Monitor
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file()
CriticalCVSS 9.8Proof of conceptEPSS 1%emagicone · emagicone store manager for woocommerceMay 24, 2025
- CVE-2025-460336Monitor
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion
CriticalCVSS 9.1Proof of conceptEPSS 1%emagicone · emagicone store manager for woocommerceMay 24, 2025
- CVE-2025-460230Monitor
eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read
HighCVSS 7.5Proof of conceptEPSS 0%emagicone · emagicone store manager for woocommerceMay 24, 2025