CyberSecBulletin

ShopMonitor.io vulnerabilities

We track 1 vulnerability in ShopMonitor.io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest ShopMonitor.io vulnerabilities

  • 9.8 Critical severity

    ShopMonitor.io: Improper Authentication

    CVE-2026-14919ShopMonitor.io

    The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a trusted-source check that is satisfiable with client-supplied request headers, allowing unauthenticated attackers to redirect outgoing