WordPress plugin
Music Store – WordPress eCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High3
- Medium2
- Low0
All Music Store – WordPress eCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Arbitrary File Read via 'f' Parameter ≤1.4.7Update to 1.4.8 | CVE-2026-115497 | |
| High7.5 | Unauthenticated SQL Injection <1.4.5Update to 1.4.5 | CVE-2026-82304 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.1.19Update to 1.2.0 | CVE-2025-24626 | |
| Critical9.1 | WordPress eCommerce <= 1.1.13 - Authenticated (Admin+) SQL Injection ≤1.1.13Update to 1.1.14 | CVE-2024-36082 | |
| Medium6.1 | Cross-Site Scripting ≤1.0.41Update to 1.0.43 | CVE-2016-10992 | |
| High7.2 | Open Redirect <1.0.15Update to 1.0.15 | — |
- High7.5Unauthenticated Arbitrary File Read via 'f' Parameter
≤1.4.7Update to 1.4.8
- High7.5Unauthenticated SQL Injection
<1.4.5Update to 1.4.5
- Medium6.1Reflected Cross-Site Scripting
≤1.1.19Update to 1.2.0
- Critical9.1WordPress eCommerce <= 1.1.13 - Authenticated (Admin+) SQL Injection
≤1.1.13Update to 1.1.14
- Medium6.1Cross-Site Scripting
≤1.0.41Update to 1.0.43
- High7.2Open Redirect
<1.0.15Update to 1.0.15
Music Store – WordPress eCommerce: common questions
Does Music Store – WordPress eCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Music Store – WordPress eCommerce: 1 critical, 3 high, 2 medium. None are known to affect version null.
How do I check which version of Music Store – WordPress eCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Music Store – WordPress eCommerce vulnerability?
CVE-2026-115497, published Oct 9, 2026: Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter. Severity: High (CVSS 7.5).
Is any Music Store – WordPress eCommerce vulnerability listed in CISA KEV?
No. None of the known Music Store – WordPress eCommerce vulnerabilities is currently listed in the CISA KEV catalog.