omnishop Omnishop – Mobile shop apps complementing your WooCommerce webshop

• CVE-2025-6214 Medium 6.5 Omnishop <= 1.0.9 - Cross-Site Request Forgery to Arbitrary User Deletion via /users/delete REST Endpoint 0.2%
• CVE-2025-6215 Medium 5.3 Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint 0.3%