CVE-2015-9413: Eshop Project Eshop

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.

Affected products

• Eshop Project Eshop: up to and including 6.3.13

Published 2019-09-26. Last modified 2026-06-17.