https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5058.htmlhttps://patchthecve.com/cve/CVE-2025-5058.htmlWed, 17 Jun 2026 09:47:06 +0000CRITICAL 9.8: The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_image() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the https://patchthecve.com/cve/CVE-2025-4603.htmlhttps://patchthecve.com/cve/CVE-2025-4603.htmlWed, 17 Jun 2026 09:33:36 +0000CRITICAL 9.1: The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to delete arbitrary fileshttps://patchthecve.com/cve/CVE-2025-4602.htmlhttps://patchthecve.com/cve/CVE-2025-4602.htmlWed, 17 Jun 2026 09:33:36 +0000MEDIUM 5.9: The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Reads in all versions up to, and including, 1.2.5 via the get_file() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contaihttps://patchthecve.com/cve/CVE-2025-4336.htmlhttps://patchthecve.com/cve/CVE-2025-4336.htmlWed, 17 Jun 2026 09:33:03 +0000HIGH 8.1: The eMagicOne Store Manager for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_file() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the a