References https://nvd.nist.gov/vuln/detail/CVE-2025-5058 https://github.com/d0n601/CVE-2025-5058 https://www.seqrite.com/zh-CN/blog/emagicone-store-manager-woocommerce-vulnerabilities-cve-2025-5058-4603/ https://www.nsfocus.net/vulndb/120243 https://avd.aliyun.com/detail?id=AVD-2025-5058 https://cve.imfht.com/poc_detail/14c4f45114f34c79c9a86d0b1a1b82ace6391a1b https://access.redhat.com/security/cve/cve-2025-5058 https://www.sentinelone.com/vulnerability-database/cve-2025-5058/ https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/store-manager-connector/emagicone-store-manager-for-woocommerce-125-unauthenticated-arbitrary-file-upload-via-set-file https://plugins.trac.wordpress.org/browser/store-manager-connector/trunk/classes/class-emosmconnectorcommon.php#L2115
Related VulnerabilitiesPoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL Injection旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞PoCCVE-2026-65761: Joomla Easy Store - SQL InjectionPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationHepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCCVE-2026-1115: parisneo/lollms < 2.2.0 - Authenticated Stored XSSPoCccm-detect: Clear-Com Core Configuration Manager Panel - DetectPoCds-store-file: DS_Store File - Exposed智慧物联网综合服务平台ListFileManager存在目录枚举漏洞PoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation