CVE-2025-32576

9.6

Critical

CVE-2025-32576

9 Apr 2025

audit@patchstack.com

Awaiting Analysis

Description

Cross-Site Request Forgery (CSRF) vulnerability in Agence web Eoxia - Montpellier WP shop allows Upload a Web Shell to a Web Server. This issue affects WP shop: from n/a through 2.6.0.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

audit@patchstack.com

https://patchstack.com/database/wordpress/plugin/wpshop/vulnerability/wordpress-wp-shop-plugin-2-6-0-csrf-to-arbitrary-file-upload-vulnerability?_s_id=cve