CVE-2026-103367 | wpdesk ShopMagic Plugin up to 4.9.0 on WordPress billing_address.first_name file inclusion

October 14, 2026 Yanac

A vulnerability labeled as critical has been found in wpdesk ShopMagic Plugin up to 4.9.0 on WordPress. The affected element is an unknown function. The manipulation of the argument billing_address.first_name results in file inclusion.

This vulnerability is identified as CVE-2026-103367. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More