LE
Vendor
levelfourstorefront
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-17553 | SC Shopping Cart & eCommerce Store levelfourstorefront | 7.2 | Sep 9 | Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action |
| CVE-2026-17589 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.9 | Sep 1 | Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter |
| CVE-2024-12712 | SC Shopping Cart & eCommerce Store levelfourstorefront | 5.3 | Jan 8 | Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates |
| CVE-2024-7827 | SC Shopping Cart & eCommerce Store levelfourstorefront | 8.8 | Aug 20 | Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter |
| CVE-2024-4213 | SC Shopping Cart & eCommerce Store levelfourstorefront | 5.3 | May 10 | Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure |
| CVE-2024-3211 | SC Shopping Cart & eCommerce Store levelfourstorefront | 8.8 | Apr 12 | Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection |
| CVE-2023-3023 | SC Shopping Cart & eCommerce Store levelfourstorefront | 7.2 | Jul 12 | WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' |
| CVE-2023-2892 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product |
| CVE-2023-2894 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product |
| CVE-2023-2893 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product |
| CVE-2023-2896 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product |
| CVE-2023-2895 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product |
| CVE-2023-2891 | SC Shopping Cart & eCommerce Store levelfourstorefront | 4.3 | Jun 9 | WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product |