Elfden Eshop Plugin vulnerabilities

• elfden eshop plugin Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for... CVE-2016-0769 8.8 HighJanuary 23, 2017
• elfden eshop plugin Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3... CVE-2016-0765 6.1 MediumJanuary 23, 2017