Eshop Magic

Eshop Magic has one disclosed vulnerability in the WordSec catalog, all reported in 2012; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Path Traversal, behind 1 of the records (100%).

The one issue recorded for Eshop Magic has a vendor fix available, so running the current release closes it.

Eshop Magic is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.5.2.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Eshop Magic vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3

Eshop Magic < 0.2 - Arbitrary File Read

Read the full analysis

Vulnerability Records

1 records


2012-10-12 00:00	Eshop Magic < 0.2 - Arbitrary File Read Eshop Magic < 0.2	`N/A`	5.3 Medium	Anonymous	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.3.2

Eshop Magic

Author

CPK Web Solutions

5.0(1)

100/100

Last Updated

2013-04-06 (14y ago)

Active Installs

10+

Downloads

7,080

Requires WP

3.3+

Requires PHP

Tested up to

WP 3.5.2

Created

2012-09-10 (14y ago)

Our goal is to help you get the most out of the eShop plugin. If you need help configuring eShop, repairing a broken install, tweaking the look and feel, changing the fields in checkout, altering the way products appear, or troubleshooting a problem… install now. This plugin will be growing rapidly so even if it doesn’t have what you need right now, it probably will very soon.

View on WordPress.org