blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2013-0724

HIGH 7.5 CVSS 2.0
Published
May 27, 2014
Last modified
June 16, 2026
NVD status
Modified
Reported by
PSIRT-CNA@flexerasoftware.com
Weakness
CWE-94
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugin for WordPress before 1.8 allows remote attackers to execute arbitrary PHP code via a URL in the dompdf parameter.

Affected WordPress components

  • wp-ecommerce-shop-styling Plugin · wp-ecommerce-shop-styling
    Confirmed match Homeless
    Versions not specified; Version 1.3; Version 1.6; Version 1.5; Up to and including 1.7; Version 1.4; Version 1.0; Version 1.2
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a n/a — Versions not specified
  • wpshopstyling wp-ecommerce-shop-styling — Up to and including 1.7
  • wpshopstyling wp-ecommerce-shop-styling — Version 1.0
  • wpshopstyling wp-ecommerce-shop-styling — Version 1.2
  • wpshopstyling wp-ecommerce-shop-styling — Version 1.3
  • wpshopstyling wp-ecommerce-shop-styling — Version 1.4
  • wpshopstyling wp-ecommerce-shop-styling — Version 1.5
  • wpshopstyling wp-ecommerce-shop-styling — Version 1.6

References