eMagicOne
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| eMagicOne Store Manager for WooCommerce | 4 | – | May 24, 2025 |
| eMagicOne Store Manager | 1 | – | May 25, 2026 |
Exploited and recent CVEs
- CVE-2026-42773 WordPress eMagicOne Store Manager plugin <= 1.3.2 - SQL Injection vulnerability 0.4%
- CVE-2025-5058 eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image() 1.5%
- CVE-2025-4336 eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_file() 1.4%
- CVE-2025-4603 eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Deletion 1.5%
- CVE-2025-4602 eMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Read 0.7%