Opal_WP vulnerabilities
We track 2 vulnerabilities in Opal_WP products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 9, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Opal_WP vulnerabilities
- 7.5 High severity
Fashion: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through < 5.3.0.
- 7.5 High severity
ekommart: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP ekommart ekommart allows PHP Local File Inclusion.This issue affects ekommart: from n/a through < 4.3.1.