Vulnerabilities / FoxyShop
FoxyShop vulnerabilities
Advisories WPSec published for FoxyShop. Other sources may list more. Its attack surface: FoxyShop on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0667 | FoxyShop <= 4.9.7 - Unauthenticated Privilege Escalation via Predictable API Key | High 8.1 | 4.9.8 |
| 2026-10-08 | WPSEC-2026-0666 | FoxyShop <= 4.9.7 - Missing Authorization to Unauthenticated Limited File Upload | Low 3.7 | 4.9.8 |
| 2026-10-08 | WPSEC-2026-0665 | FoxyShop <= 4.9.7 - Unauthenticated Sensitive Information Exposure via Order Export | High 7.5 | 4.9.8 |
License: CC BY 4.0