eMagicOne vulnerabilities
We track 5 vulnerabilities in eMagicOne products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 25, 2026.
Latest eMagicOne vulnerabilities
- 9.3 Critical severity
eMagicOne Store Manager: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in eMagicOne eMagicOne Store Manager allows Blind SQL Injection. This issue affects eMagicOne Store Manager: from n/a through 1.3.2.
- 9.8 Critical severity
eMagicOne Store Manager for WooCommerce: Unrestricted Upload of File with Dangerous Type
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated att
- 9.1 Critical severity
eMagicOne Store Manager for WooCommerce: External Control of File Name or Path
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthentic
- 7.5 High severity
eMagicOne Store Manager for WooCommerce: External Control of File Name or Path
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions up to, and including, 1.2.5 via the get_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitra
- 9.8 Critical severity
eMagicOne Store Manager for WooCommerce: Unrestricted Upload of File with Dangerous Type
The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated atta