shopfiles records
8 published records for vendor shopfiles.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 37.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-22701No exploit | WordPress Ebook Store plugin <= 5.775 - Broken Authentication vulnerabilityshopfiles · ebook store · CWE-862 | Critical9.8 | — | 1.0% | Dec 9, 2024 |
24Monitor | CVE-2024-12262No exploit | Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'shopfiles · ebook store · CWE-79 | Medium6.1 | — | 0.4% | Dec 21, 2024 |
24Monitor | CVE-2023-45602No exploit | WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)shopfiles · ebook store · CWE-79 | Medium6.1 | — | 0.3% | Oct 18, 2023 |
24Monitor | CVE-2024-11287No exploit | Ebook Store <= 5.8001 - Reflected Cross-Site Scriptingshopfiles · ebook store · CWE-79 | Medium6.1 | — | 0.3% | Dec 21, 2024 |
24Monitor | CVE-2025-8113No exploit | Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']shopfiles · ebook store · CWE-79 | Medium6.1 | — | 0.2% | Aug 16, 2025 |
21Monitor | CVE-2024-6567No exploit | Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosureshopfiles · ebook store · CWE-200 | Medium5.3 | — | 0.4% | Aug 1, 2024 |
19Monitor | CVE-2023-22690No exploit | WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)shopfiles · ebook store · CWE-79 | Medium4.8 | — | 0.3% | May 15, 2023 |
19Monitor | CVE-2024-23501No exploit | WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)shopfiles · ebook store · CWE-79 | Medium4.8 | — | 0.3% | Feb 29, 2024 |
- CVE-2023-2270139Monitor
WordPress Ebook Store plugin <= 5.775 - Broken Authentication vulnerability
CriticalCVSS 9.8No exploitEPSS 1%shopfiles · ebook storeDec 9, 2024
- CVE-2024-1226224Monitor
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'
MediumCVSS 6.1No exploitEPSS 0%shopfiles · ebook storeDec 21, 2024
- CVE-2023-4560224Monitor
WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%shopfiles · ebook storeOct 18, 2023
- CVE-2024-1128724Monitor
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%shopfiles · ebook storeDec 21, 2024
- CVE-2025-811324Monitor
Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']
MediumCVSS 6.1No exploitEPSS 0%shopfiles · ebook storeAug 16, 2025
- CVE-2024-656721Monitor
Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure
MediumCVSS 5.3No exploitEPSS 0%shopfiles · ebook storeAug 1, 2024
- CVE-2023-2269019Monitor
WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%shopfiles · ebook storeMay 15, 2023
- CVE-2024-2350119Monitor
WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%shopfiles · ebook storeFeb 29, 2024