<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: roxnor-shopengine-elementor-woocommerce-builder-addon-all-in-one-woocommerce-sol</title><description>Every new CVE for roxnor-shopengine-elementor-woocommerce-builder-addon-all-in-one-woocommerce-sol.</description><link>https://agentprime.io/</link><item><title>CVE-2026-85575: The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates &amp; Woo Widgets &lt;= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;sh…</title><link>https://agentprime.io/advisories/CVE-2026-85575/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85575/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 01:03:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-75971: ShopEngine Elementor WooCommerce Builder Addon &lt;= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import &apos;&lt;wp_option&gt;&apos; Nodes</title><link>https://agentprime.io/advisories/CVE-2026-75971/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-75971/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Aug 2026 11:27:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12358: ShopEngine &lt;= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulation</title><link>https://agentprime.io/advisories/CVE-2025-12358/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12358/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Dec 2025 12:29:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-11888: ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution &lt;= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update</title><link>https://agentprime.io/advisories/CVE-2025-11888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-11888/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 25 Oct 2025 05:31:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10173: ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution &lt;= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update</title><link>https://agentprime.io/advisories/CVE-2025-10173/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10173/</guid><description>CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Sep 2025 03:25:33 GMT</pubDate><category>CVE</category></item></channel></rss>