ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets, with AI-generated Chinese analysis, references, and POCs.

Vendor: roxnor

CVE ID	Title	CVSS	Severity	Published
CVE-2026-85575	The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shopengine_product_title_header_size' Parameter CWE-79	6.4	Medium	2026-09-15
CVE-2026-75971	ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes CWE-269	7.2	High	2026-08-25

All 2 known CVE vulnerabilities affecting ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets with full Chinese analysis, references, and POCs where available.