Spreadshop Plugin

Spreadshop Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Spreadshop Plugin has a vendor fix available, so running the current release closes it.

All of these findings were reported by Abdi Pranata. Spreadshop Plugin is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Spreadshop Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2023-29426

Spreadshop Plugin <= 1.6.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2023-04-06 00:00	Spreadshop Plugin <= 1.6.5 - Cross-Site Request Forgery Spreadshop Plugin <= 1.6.5	`CVE-2023-29426`	4.3 Medium	Abdi Pranata	Yes

Showing 1–1 of 1 reports

Latestv1.6.6

Spreadshop Plugin

Author

Spreadshop Team

3.2(6)

64/100

Last Updated

2024-02-08 (3y ago)

Active Installs

4,000+

Downloads

86,257

Requires WP

1.0+

Requires PHP

Tested up to

WP 6.4.10

Created

2017-05-02 (10y ago)

With this plugin, you can easily host a top-notch ecommerce shop in WordPress while staying up-to-date with the latest features of your Spreadshop. This is achieved by embedding your existing Spreadshop as-is into any WordPress post, page or path. Both the plugin and your Spreadshop are fully free of charge. Always. What you need * Installed WordPress instance * A Spreadshop (which can be registered here)

View on WordPress.org