Ecwid

4 CVEs in 2 Ecwid products, including Ecwid By Lightspeed Ecommerce Shopping Cart, Ecwid Ecommerce Shopping Cart. Newest: CVE-2026-1750 (2026-02-15).

Ecwid products with known CVEs

ProductCVEs
Ecwid By Lightspeed Ecommerce Shopping Cart3
Ecwid Ecommerce Shopping Cart1
Ecwid CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-1750High8.82026-02-15The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is…
CVE-2024-13795Medium4.32025-02-18The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27…
CVE-2024-2456Medium6.42024-04-09The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and in…
CVE-2022-2432High8.82022-09-06The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23. This is due to mi…