Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: roxnor

CVE IDTitleCVSSSeverityPublished
CVE-2025-12358 ShopEngine <= 4.8.5 - Cross-Site Request Forgery to Wishlist Manipulation CWE-352 4.3 Medium2025-12-03
CVE-2025-11888 ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.4 - Incorrect Authorization to Authenticated (Editor+) License Status Update CWE-863 2.7 Low2025-10-25
CVE-2025-10173 ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution <= 4.8.3 - Insufficient Authorization to Authenticated (Editor+) Settings Update CWE-862 2.7 Low2025-09-26

All 3 known CVE vulnerabilities affecting ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with full Chinese analysis, references, and POCs where available.