WPshop 2 – E-Commerce, CVE-2025-69383
- CVE, Research URL
- Home page URL
- Application
- Published on
- Feb 20, 2026
- Research Description
- Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Agence web Eoxia - Montpellier WP shop wpshop allows PHP Local File Inclusion.This issue affects WP shop: from n/a through <= 2.6.1.
- Affected versions
-
max 2.6.1.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Wired Impact Volunteer Management (CVE-2025-26980) , Feb 26, 2025 |
| Wired Impact Volunteer Management (CVE-2026-24997) , Feb 27, 2026 |