storeengine
Security Risk Profile
38
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 3 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 17, 2025 to present
3
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
38/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
Malicious File Upload
1
Most Affected Products
1. StoreEngine WordPress plugin StoreEngine1
2. StoreEngine StoreEngine1
3. StoreEngine WordPress eCommerce Plugin1
Recent Vulnerabilities
See more →CVE-2026-15056
CVSS 6.5medium
StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL
8/16/2026🔧 No Patch
CVE-2025-9216
CVSS 8.8EPSS 0%high
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
9/17/2025🔧 No Patch
CVE-2025-9215
CVSS 6.5EPSS 0%medium
StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More <= 1.5.0 - Authenticated (Subscriber+) Arbitrary File Download
9/17/2025🔧 No Patch
Monitor storeengine in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.