Wpmet Shopengine vulnerabilities

• wpmet shopengine WordPress ShopEngine plugin <= 4.9.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-122673 6.5 MediumNovember 9, 2026
• wpmet shopengine WordPress ShopEngine Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-45371 5.4 MediumMay 25, 2023