SimpleShop

SimpleShop has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Improper Access Control, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for SimpleShop has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Francesco Carlucci. SimpleShop is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
4.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all SimpleShop vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-1229

SimpleShop <= 2.10.2 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records
SimpleShop banner
Latestv2.18.0
0.0(0)
0/100
Last Updated
2026-08-25 (19d ago)
Active Installs
1,000+
Downloads
33,959
Requires WP
6.6+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2018-09-15 (8y ago)

The SimpleShop WP plugin can be installed on a WordPress website with WP version 6.6 and higher or on a Mioweb website, which does not contain its own member sections. The compatible version of PHP is 7.4 and higher. To ensure correct functionality of the plugin, we always recommend to update to the newest version of the plugin. Functions Member sections The SimpleShop WordPress plugin is primarily used to create and manage member sections on your website. Creating users and granting access to the right content is ensured by communication with the SimpleShop sales system, where it is necessary to have your own account. You can register for a SimpleShop account at: https://app.simpleshop.cz/account/new/ Plugin functions relating to member sections (the instructions are in Czech): creation of member sections – instructions content restriction – instructions gradual release of entire pages and individual parts of the content releasing the content in specific dates or in a number of days after registration automatic renewal of membership using repeated payments in the SimpleShop application – instructions redirecting the user after logging in – instructions The SimpleShop WordPress plugin is compatible with the WordPress editor (Gutenberg). Inserting a sales form The second area of use of the plugin is to insert a sales form created in the SimpleShop into your website. Again, you must have your own account in the SimpleShop system. You can register for a SimpleShop account at: https://app.simpleshop.cz/account/new/ The procedure of inserting a sales form into the website is explained in the following instructions (in Czech).

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C