sainwp OneStore Sites

• CVE-2024-13905 Medium 5.3 OneStore Sites <= 0.1.1 - Unauthenticated Blind Server-Side Request Forgery 0.4%
• CVE-2025-25107 Critical 9.6 WordPress OneStore Sites plugin <= 0.1.1 - CSRF to Arbitrary Plugin Installation vulnerability 0.2%