9.9 Critical

CVE-2025-31048 Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web Shell to a Web…

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Themify Shopo allows Upload a Web Shell to a Web Server.This issue affects Shopo: from n/a through 1.1.4.

Affected products and versions

Product	Affected versions	Fixed in
Shopo 1.1	earliest → 1.1.4	No fix stated

Do you use Shopo?

Track this CVE Watch Shopo Check my SBOMs

www.cveye.io/en/cve/CVE-2025-31048

Timeline

Published January 5, 2026
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE