Cedcommerce
7 CVEs across 12 Cedcommerce products. Browse Cedcommerce vulnerabilities, severities, and proof-of-concept exploits.
Cedcommerce products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14279 | High | 8.8 | 2026-08-15 | The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the ced_wholesale_request_send AJAX… |
CVE-2025-62138 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
CVE-2025-68877 | High | 7.5 | 2025-12-29 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce CedCommerce Integration fo… |
CVE-2025-57945 | Medium | 5.9 | 2025-09-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cedcommerce WP Advanced PDF wp-advanced-pdf allows Stored… |
CVE-2022-4363 | Medium | 6.5 | 2025-05-16 | The Wholesale Market WordPress plugin before 2.2.2, Wholesale Market for WooCommerce WordPress plugin before 2.0.1 have a flawed CSRF check when updating their… |
CVE-2025-39384 | High | 7.5 | 2025-04-24 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay pr… |
CVE-2025-31773 | Medium | 5.3 | 2025-04-01 | Missing Authorization vulnerability in cedcommerce Ship Per Product ship-per-product allows Accessing Functionality Not Properly Constrained by ACLs.This issue… |
CVE-2024-5641 | Medium | 6.4 | 2024-07-04 | The One Click Order Re-Order plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ced_ocor_save_ge… |
CVE-2023-47646 | Medium | 5.9 | 2023-11-14 | Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed products plugin <= 1.1.1 versions. |
CVE-2022-4298 | Critical | 9.8 | 2023-01-02 | The Wholesale Market WordPress plugin before 2.2.1 does not have authorisation check, as well as does not validate user input used to generate system path, all… |
CVE-2022-4109 | Low | 2.7 | 2023-01-02 | The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing high privilege users s… |
CVE-2022-4108 | Medium | 4.9 | 2022-12-19 | The Wholesale Market for WooCommerce WordPress plugin before 1.0.8 does not validate user input used to generate system path, allowing high privilege users suc… |
CVE-2022-4107 | Medium | 6.5 | 2022-12-19 | The SMSA Shipping for WooCommerce WordPress plugin before 1.0.5 does not have authorisation and proper CSRF checks, as well as does not validate the file to be… |
CVE-2022-4106 | High | 7.5 | 2022-12-19 | The Wholesale Market for WooCommerce WordPress plugin before 1.0.7 does not have authorisation check, as well as does not validate user input used to generate… |