WPshop 2 – E-Commerce, CVE-2015-10135

CVE, Research URL: CVE-2015-10135
Home page URL: Security reports for WPshop 2 – E-Commerce
Application: WPshop 2 – E-Commerce
Published on: Jul 19, 2025
Research Description: The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versions before 1.3.9.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Affected versions: Min -, max 1.3.9.6.
Status: vulnerable

WPshop 2 &#8211; E-Commerce, CVE-2015-10135