OneStore Sites vulnerabilities

2 known vulnerabilities in OneStore Sites from Sainwp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  OneStore Sites: Server-Side Request Forgery

  CVE-2024-13905Feb 27, 2025Sainwp

  The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.1.1 via the class-export.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations ori

• 9.6 Critical severity

  OneStore Sites: Cross-Site Request Forgery

  CVE-2025-25107Feb 7, 2025Sainwp

  Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites onestore-sites allows Cross Site Request Forgery.This issue affects OneStore Sites: from n/a through <= 0.1.1.