SC
Product
Shopping Cart & eCommerce Store
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 9Low 0
Watch
Add Shopping Cart & eCommerce Store to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7827 | 8.8 | Aug 20 | Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter Affected: through 5.7.2 |
| CVE-2024-3211 | 8.8 | Apr 12 | Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection Affected: through 5.6.3 |
| CVE-2026-17553 | 7.2 | Sep 9 | Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action Affected: through 5.9.3 |
| CVE-2023-3023 | 7.2 | Jul 12 | WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' Affected: through 5.4.10 |
| CVE-2024-12712 | 5.3 | Jan 8 | Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates Affected: through 5.7.8 |
| CVE-2024-4213 | 5.3 | May 10 | Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure Affected: through 5.6.4 |
| CVE-2026-17589 | 4.9 | Sep 1 | Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter Affected: through 5.9.2 |
| CVE-2023-2892 | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product Affected: through 5.4.8 |
| CVE-2023-2894 | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product Affected: through 5.4.8 |
| CVE-2023-2893 | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product Affected: through 5.4.8 |
| CVE-2023-2896 | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product Affected: through 5.4.8 |
| CVE-2023-2895 | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product Affected: through 5.4.8 |
| CVE-2023-2891 | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product Affected: through 5.4.8 |
Showing 13