CVE-2013-0724: PHP remote file inclusion vulnerability in includes/generate-pdf.php in the WP ecommerce Shop Styling plugi...

Security readout for executives and security teams

This CVE affects old versions of the WP ecommerce Shop Styling WordPress plugin. A vulnerable PDF generation file could let a remote attacker make the site load PHP code from a URL, which can lead to server compromise. The record does not provide CVSS scoring or current exploitation evidence. Exposure is limited to WordPress sites that installed WP ecommerce Shop Styling before version 1.8 and still expose the affected generate-pdf.php file. Sites without this plugin, or running a fixed version, are not indicated as affected by the provided sources. Treat this as a high-priority legacy WordPress cleanup item, especially on internet-facing ecommerce sites. It is not KEV-listed in the supplied data, but the potential impact is full site or server compromise if an affected plugin remains exposed. Mitigation focus: Inventory WordPress sites for WP ecommerce Shop Styling installations.; Upgrade to version 1.8 or later if the plugin is still required.; Remove or disable the plugin if it is unsupported or unnecessary..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.