Justinsainton Wp Ecommerce
2 CVEs affecting Justinsainton Wp Ecommerce. Latest disclosed: 2024-02-28. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-1514 | Critical | 9.8 | 2024-02-28 | The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all versions up to, and including, 3… |
CVE-2024-1516 | Medium | 5.3 | 2024-02-28 | The WP eCommerce plugin for WordPress is vulnerable to unauthorized arbitrary post creation due to a missing capability check on the check_for_saas_push() func… |