Omnishop – Mobile shop apps complementing your WooCommerce webshop

Vulnerabilities 2Slug omnishopLatest version 1.0.9WordPress.org →Closed
Medium 5.3 Unfixed Closed
2025-07-23≤ 1.0.9

Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint

EUVDWordfenceCVE
Medium 6.5 Unfixed Closed
2025-07-23≤ 1.0.9

WordPress Omnishop Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

EUVDPatchstackWordfenceCVE