eoxia

Products

ProductCVEsExploitedLatest
Task Manager2–Mar 21, 2026
WPshop 2 – E-Commerce2–May 7, 2025

Exploited and recent CVEs

  • CVE-2026-4004 Medium 6.5 Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'task_id' Parameter 0.3%
  • CVE-2026-2351 Medium 6.5 Task Manager <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Read 0.3%
  • CVE-2025-3852 High 8.8 WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover 0.4%
  • CVE-2025-3853 Medium 6.5 WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation 0.2%