Wp-Ecommerce

10 CVEs across 3 Wp-Ecommerce products. Browse Wp-Ecommerce vulnerabilities, severities, and proof-of-concept exploits.

Wp-Ecommerce products with known CVEs

ProductCVEs
Easy Wp Smtp8
Recurring Paypal Donations1
Wp Ecommerce1
Wp-Ecommerce CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-3073Low2.72024-06-13The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to information exposure in all versions up to, and inclu…
CVE-2024-35676Medium6.52024-06-08Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpecommerce Recurring PayPal Donations allows Stor…
CVE-2024-1514Critical9.82024-02-28The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all versions up to, and including, 3…
CVE-2019-25141Critical9.82023-06-07The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks o…
CVE-2022-42699Critical9.12022-12-06Auth. Remote Code Execution vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.
CVE-2022-45833Medium6.82022-12-06Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 on WordPress.
CVE-2022-45829High8.72022-12-06Auth. Path Traversal vulnerability in Easy WP SMTP plugin <= 1.5.1 at WordPress.
CVE-2022-3334High7.22022-10-31The Easy WP SMTP WordPress plugin before 1.5.0 unserialises the content of an imported file, which could lead to PHP object injection issue when an admin impor…
CVE-2020-35234High7.52020-12-14The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list th…
CVE-2017-7723Medium6.12017-04-24XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.