Login Request a demo
SS
Product
Simple Shopping Cart
by mra13 · last CVE Apr 4, 2026
8
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Simple Shopping Cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-3529
8.2
0%
Apr 23
WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter
Affected: through 5.1.2
CVE-2025-3530
7.5
1%
Apr 23
WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation
Affected: through 5.1.2
CVE-2025-3874
6.5
0%
May 1
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference
Affected: through 5.1.3
CVE-2026-0552
6.4
0%
Apr 4
Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode
Affected: through 5.2.4
CVE-2024-12622
6.4
0%
Dec 24
WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 5.0.7
CVE-2025-3890
5.4
0%
May 1
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 5.1.3
CVE-2025-3889
5.3
0%
May 1
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'
Affected: through 5.1.3
CVE-2023-6497
4.8
0%
Jan 27
WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting
Affected: through 4.7.1
Showing 8