Wpeasycart Wp_easycart
10 CVEs affecting Wpeasycart Wp_easycart. Latest disclosed: 2023-07-12. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-2673 | High | 8.8 | 2017-10-06 | The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for Wo… |
CVE-2023-3023 | High | 7.2 | 2023-07-12 | The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to insu… |
CVE-2023-1124 | High | 7.2 | 2023-04-03 | The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perfor… |
CVE-2023-2892 | Medium | 6.5 | 2023-06-09 | The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect n… |
CVE-2023-2891 | Medium | 6.5 | 2023-06-09 | The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect n… |
CVE-2023-2896 | Medium | 4.3 | 2023-06-09 | The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect n… |
CVE-2023-2895 | Medium | 4.3 | 2023-06-09 | The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect n… |
CVE-2023-2894 | Medium | 4.3 | 2023-06-09 | The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect n… |
CVE-2023-2893 | Medium | 4.3 | 2023-06-09 | The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect n… |
CVE-2014-9308 | | 2015-01-15 | Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0… |