plugin

G Web Shop Vulnerabilities

1 known security issue reported for the G Web Shop WordPress plugin. Most recent disclosed Nov 13, 2011.

1 critical

Running G Web Shop on your site? Check whether your installed version is affected.

Zingiri Web Shop <= 2.2.3 - Remote Code Execution

critical

The Zingiri Web Shop plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.2.3 via the 'selectedDocuments' parameter. This allows unauthenticated attackers to execute code on the server.

CVSS:: 9.8
Affected:: up to 2.2.3
Fixed in:: 2.2.4
Disclosed:: Nov 13, 2011

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database