Etsy Shop Project Etsy Shop — known CVE vulnerabilities

Every CVE whose affected-product data names Etsy Shop Project Etsy Shop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-5470 — CVSS 6.4 (medium): The Etsy Shop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etsy-shop' shortcode in versions up to, and including…
• CVE-2023-25975 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions.