Emagicone Emagicone Store Manager For Woocommerce — known CVE vulnerabilities

Every CVE whose affected-product data names Emagicone Emagicone Store Manager For Woocommerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-5058 — CVSS 9.8 (critical): The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
• CVE-2025-4603 — CVSS 9.1 (critical): The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path…
• CVE-2025-4336 — CVSS 8.1 (high): The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
• CVE-2025-4602 — CVSS 5.9 (medium): The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions up to, and…