WP
Vendor
Wpeasycart
12
CVEs
0
On KEV
0
New 30D
Products
WE8.8
WP Easycart
Wpeasycart
10 CVEs0 on KEV0 new
SC8.8
Shopping Cart & Ecommerce Store
Wpeasycart
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-7827 | SC Shopping Cart \& Ecommerce Store Wpeasycart | 8.8 | Aug 20 | Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter |
| CVE-2023-3023 | WE WP Easycart Wpeasycart | 7.2 | Jul 12 | WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' |
| CVE-2023-2892 | WE WP Easycart Wpeasycart | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product |
| CVE-2023-2894 | WE WP Easycart Wpeasycart | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product |
| CVE-2023-2893 | WE WP Easycart Wpeasycart | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product |
| CVE-2023-2896 | WE WP Easycart Wpeasycart | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product |
| CVE-2023-2895 | WE WP Easycart Wpeasycart | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product |
| CVE-2023-2891 | WE WP Easycart Wpeasycart | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product |
| CVE-2023-1124 | WE WP Easycart Wpeasycart | 7.2 | Apr 3 | Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI |
| CVE-2021-34645 | SC Shopping Cart & Ecommerce Store Wpeasycart | 8.8 | Aug 19 | Shopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting |
| CVE-2015-2673 | WE WP Easycart Wpeasycart | 8.8 | Oct 6 | The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote… |
| CVE-2014-9308 | WE WP Easycart Wpeasycart | – | Jan 15 | Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote… |
