Shopmagic For Woocommerce Vulnerabilities

The ShopMagic – email automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.7.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 4.7.2

Fixed in:

4.7.3

Disclosed:

Jan 7, 2026

CVE-2025-69093 on NVD →

The Free Follow-Up Emails & Marketing Automation for WooCommerce – ShopMagic plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.6. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:

7.5

Affected:

up to 4.5.6

Fixed in:

4.5.7

Disclosed:

Oct 15, 2025

CVE-2025-59578 on NVD →