Codepeople Music Store vulnerabilities

3 vulnerabilities

Known vulnerabilities in Codepeople Music Store, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2016-10992codepeoplemusic_store+1
EPSS score
1.62%
The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.7.1CVE-2025-24626codepeoplemusic_store+1
EPSS score
0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Music Store music-store allows Reflected XSS.This issue affects Music Store: from n/a through <= 1.1.19.9.1CVE-2024-36082codepeoplemusic_store+2
EPSS score
0.52%
SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitrary SQL commands. Information stored in the database may be obtained or altered by the attacker.