Music Store – WordPress eCommerce vulnerabilities

Product

Music Store – WordPress eCommerce

by codepeople · last CVE Oct 23, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Music Store – WordPress eCommerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-115497 New	7.5	1%	Oct 23	Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter Affected: through 1.4.7
CVE-2024-36082	6.5	1%	Jun 7	SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute… Affected: prior to 1.1.14