Shopxo vulnerabilities

Products

• Shopxo 17

Newest

• shopxo zongzhige ShopXO ZIP File Payment.php Upload unrestricted upload CVE-2025-5108 5.3 MediumMay 23, 2025
• shopxo ShopXO Vulnerable to Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) CVE-2025-28094 6.5 MediumMarch 28, 2025
• shopxo ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Email Settings CVE-2025-28093 6.3 MediumMarch 28, 2025
• shopxo ShopXO Vulnerable to Server-Side Request Forgery (SSRF) via Image Upload CVE-2025-28092 6.3 MediumMarch 28, 2025
• shopxo ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php. CVE-2025-26325 9.8 CriticalFebruary 27, 2025
• shopxo ShopXO Template ThemeAdminService.php injection CVE-2025-1611 5.1 MediumFebruary 24, 2025
• shopxo ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to... CVE-2024-44682 6.1 MediumAugust 30, 2024
• gongfuxiang shopxo ShopXO Uploader.php server-side request forgery CVE-2024-6524 5.3 MediumJuly 5, 2024
• shopxo Arbitrary file upload in ShopXO CVE-2021-41938 7.2 HighMay 19, 2022
• shopxo Incorrect Permission Assignment for Critical Resource in ShopXO CVE-2022-28056 Fix available 9.8 CriticalMay 2, 2022
• shopxo The PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0... CVE-2020-26008 7.8 HighMarch 20, 2022
• shopxo An arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows... CVE-2020-26007 7.8 HighMarch 20, 2022
• shopxo Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges... CVE-2020-19778 9.8 CriticalApril 14, 2021
• shopxo ShopXO RCE Vulnerability CVE-2021-27817 9.8 CriticalMarch 15, 2021
• shopxo ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to... CVE-2020-24220 8.8 HighAugust 17, 2020
• shopxo An issue was discovered in ShopXO 1.2.0. In the UnlinkDir method of the FileUtil.php file, the... CVE-2019-5887 7.5 HighJanuary 10, 2019
• shopxo An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file,... CVE-2019-5886 9.8 CriticalJanuary 10, 2019