Advisories · Technology
kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More.
Every CVE that names kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL
- kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More
- Path traversal
- CVSS 8.8 High
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
- kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More
- Unrestricted file upload
- CVSS 6.5 Medium
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download
- kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More
- Path traversal