CyberSecBulletin

Sainwp vulnerabilities

We track 2 vulnerabilities in Sainwp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2025.

2vulnerabilities
2critical
0high
0exploited
9.3average CVSS score

Latest Sainwp vulnerabilities

  • 9.1 Critical severity

    OneStore Sites: Server-Side Request Forgery

    CVE-2024-13905Sainwp

    The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations ori

  • 9.6 Critical severity

    OneStore Sites: Cross-Site Request Forgery

    CVE-2025-25107Sainwp

    Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites onestore-sites allows Cross Site Request Forgery.This issue affects OneStore Sites: from n/a through <= 0.1.1.