Unscored severity · published May 13, 2014
CVE-2013-2705
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Wordpress Simple Paypal Shopping Cart · Tipsandtricks-hq
through 3.5; 1.2; 1.2.2; 1.3; 1.4; 1.5; +19 more · source: NVD
Affected product
WS
Wordpress Simple Paypal Shopping Cart
Tipsandtricks-hq
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-2705
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-2705
osvdb.org
http://osvdb.org/93953
Vendor Advisory
http://secunia.com/advisories/52963
www.tipsandtricks-hq.com
http://www.tipsandtricks-hq.com/ecommerce/wordpress-shopping-cart-change-log-319
More from Wordpress Simple Paypal Shopping Cart
6.5
CVE-2025-3874
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference
5.4
CVE-2025-3890
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
5.4
CVE-2022-4672
WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode
5.3
CVE-2025-3889
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity'
5.3
CVE-2023-1431
The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart…