WP
Vendor
Wp-ecommerce
11
CVEs
0
On KEV
0
New 30D
Products
EW9.8
Easy WP Smtp
Wp-ecommerce
8 CVEs0 on KEV0 new
RP5.4
Recurring Paypal Donations
Wp-ecommerce
1 CVEs0 on KEV0 new
WP5.3
Wp-e-commerce
Wp-ecommerce
1 CVEs0 on KEV0 new
WE7.5
WP Ecommerce
Wp-ecommerce
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-3073 | EW Easy WP Smtp Wp-ecommerce | 2.7 | Jun 13 | Easy WP SMTP by SendLayer <= 2.3.0 - Exposure of Sensitive Information via the UI |
| CVE-2024-35676 | RP Recurring Paypal Donations Wp-ecommerce | 5.4 | Jun 8 | WordPress Recurring PayPal Donations plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1516 | WP Wp-e-commerce Wp-ecommerce | 5.3 | Feb 28 | WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation |
| CVE-2024-1514 | WE WP Ecommerce Wp-ecommerce | 7.5 | Feb 28 | WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection |
| CVE-2019-25141 | EW Easy WP Smtp Wp-ecommerce | 9.8 | Jun 7 | Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update |
| CVE-2022-42699 | EW Easy WP Smtp Wp-ecommerce | 8.8 | Dec 6 | WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE) |
| CVE-2022-45829 | EW Easy WP Smtp Wp-ecommerce | 8.1 | Dec 6 | WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion |
| CVE-2022-45833 | EW Easy WP Smtp Wp-ecommerce | 6.5 | Dec 6 | WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal |
| CVE-2022-3334 | EW Easy WP Smtp Wp-ecommerce | 7.2 | Oct 31 | Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection |
| CVE-2020-35234 | EW Easy WP Smtp Wp-ecommerce | 7.5 | Dec 14 | The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020 |
| CVE-2017-7723 | EW Easy WP Smtp Wp-ecommerce | 6.1 | Apr 24 | XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body |