eShop

eShop has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2011 and 2016; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2016 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include SQL Injection.

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2016.

4 independent researchers contributed these findings, most of them (2) reported by Larry W. Cashdollar.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all eShop vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2016-0769

eShop <= 6.3.14 - Multiple SQL Injections

Read the full analysis

Vulnerability Records

5 records


2016-02-02 00:00	eShop <= 6.3.14 - Multiple SQL Injections eShop <= 6.3.14	`CVE-2016-0769`	8.8 High	Larry W. Cashdollar	No
2016-02-02 00:00	eShop <= 6.3.14 - Multiple Cross-Site Scripting eShop <= 6.3.14	`CVE-2016-0765`	6.1 Medium	Larry W. Cashdollar	No
2015-09-09 00:00	eshop <= 6.3.13 - Cross-Site Forgery Request and Reflected Cross-Site Scripting eShop <= 6.3.13	`CVE-2015-9413`	6.5 Medium	Ehsan Hosseini	Yes
2015-05-06 00:00	eShop <= 6.3.11 - Cross-Site Scripting eShop < 6.3.12	`CVE-2015-3421`	6.1 Medium	High-Tech Bridge Security Research Lab	Yes
2011-07-20 00:00	eShop < 6.2.9 - Reflected Cross-Site Scripting eShop < 6.2.9	`N/A`	6.5 Medium	HTBridge	Yes

Showing 1–5 of 5 reports