omnishop

Products

Exploited and recent CVEs

  • CVE-2025-6214 Medium 6.5 Omnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint 0.2%
  • CVE-2025-6215 Medium 5.3 Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint 0.3%