Approved changes feed: RSS · Atom

cpe:2.3:a:codepeople:music_store:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCodepeople (f85d1a73-9b3f-50b5-b09d-cd136586594b)
ProductMusic Store (72d359e0-798e-54fb-809e-7c0dda8d42b2)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/music-store purl2cpe 2026-06-01 10:10:56.638865

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36082 vulnerable 2026-06-03 14:56:03.541212 Details available
SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in the database may be obtained or altered by the attacker.
Published: 2024-06-07T03:42:21.207Z
Updated: 2024-10-30T19:21:50.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10992 vulnerable 2026-06-03 14:35:30.073374 Details available
The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.
Published: 2019-09-17T14:36:04.000Z
Updated: 2024-08-06T03:47:33.972Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.