ShopEngine

Roxnor

Developer

4.8.7

Latest version

80,000

Installations

No date

Last updated

WordPress Plugin

Active VDP

Report vulnerability

Vulnerabilities

Security Policy

Security Contributors

Vulnerability history

0 present

4 fixed

0 Mitigation rules

Cross-Site Request Forgery to Wishlist Manipulation vulnerability
<= 4.8.5
Dec 3, 2025
Incorrect Authorization to Authenticated (Editor+) License Status Update vulnerability
<= 4.8.4
Oct 25, 2025
Insufficient Authorization to Authenticated (Editor+) Settings Update vulnerability
<= 4.8.3
Sep 25, 2025
Cross-Site Request Forgery (CSRF) vulnerability
<= 4.1.1
Apr 19, 2023