Login Request a demo
WE
Product
WP Easycart
by Wpeasycart · last CVE Jul 12, 2023
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 3Medium 6Low 0
Severity
All severities10Critical0High3Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Easycart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-2673
8.8
19%
Oct 6
The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote…
Affected: 1.1.30; 1.1.31; 1.1.32; 1.1.33; 1.1.34; 1.1.35; +34 more
CVE-2023-3023
7.2
1%
Jul 12
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
Affected: before 5.4.11
CVE-2023-1124
7.2
1%
Apr 3
Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
Affected: before 5.4.3
CVE-2023-2892
4.3
0%
Jun 9
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product
Affected: through 5.4.8
CVE-2023-2894
4.3
0%
Jun 9
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product
Affected: through 5.4.8
CVE-2023-2893
4.3
0%
Jun 9
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
Affected: through 5.4.8
CVE-2023-2896
4.3
0%
Jun 9
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
Affected: through 5.4.8
CVE-2023-2895
4.3
0%
Jun 9
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
Affected: through 5.4.8
CVE-2023-2891
4.3
0%
Jun 9
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product
Affected: through 5.4.8
CVE-2014-9308
–
51%
Jan 15
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote…
Affected: through 3.0.8
Showing 10