theme

Woostore Vulnerabilities

2 known security issues reported for the Woostore WordPress theme. Most recent disclosed Aug 1, 2014.

1 critical

Running Woostore on your site? Check whether your installed version is affected.

Woostore [woostore] < 1.1

unknown

There is a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Update the theme.

Affected:: up to 1.1
Fixed in:: 1.1
Disclosed:: Aug 1, 2014

WooThemes WooFramework < 5.3.10 - Remote Code Execution via Shortcodes

critical

The WooFramework, used for all WooThemes for WordPress, is vulnerable to Remote Code Execution in versions up to, and including, 5.3.9 via the shortcode preview feature. This makes it possible for unauthenticated attackers attackers to execute code on the server.

CVSS:: 9.8
Affected:: up to 1.3.32
Fixed in:: 1.4
Disclosed:: Apr 28, 2012

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database