eoxia WPshop 2 – E-Commerce

• CVE-2025-3852 High 8.8 WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover 0.4%
• CVE-2025-3853 Medium 6.5 WPshop 2 – E-Commerce 2.0.0 - 2.6.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Key Generation 0.2%