WS
Product
Wordpress Simple Paypal Shopping Cart
7
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 6Low 0
Watch
Add Wordpress Simple Paypal Shopping Cart to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3874 | 6.5 | May 1 | WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference Affected: before 5.1.4 |
| CVE-2025-3890 | 5.4 | May 1 | WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: before 5.1.4 |
| CVE-2022-4672 | 5.4 | Jan 23 | WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode Affected: before 4.6.2 |
| CVE-2025-3889 | 5.3 | May 1 | WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' Affected: before 5.1.4 |
| CVE-2023-1431 | 5.3 | Mar 16 | The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart… Affected: through 4.6.3 |
| CVE-2023-6497 | 4.8 | Jan 27 | WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting Affected: through 4.7.1 |
| CVE-2013-2705 | – | May 13 | Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication… Affected: through 3.5; 1.2; 1.2.2; 1.3; 1.4; 1.5; +19 more |
Showing 7