CVE-2024-12128

🗓️ 07 Dec 2024 09:27:06Reported by WordfenceType

WordPress plugin vulnerable to Reflected Cross-Site Scripting due to insufficient input sanitization.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-12128	7 Dec 202409:29	–	circl
Cvelist	CVE-2024-12128 Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter	7 Dec 202409:27	–	cvelist
EUVD	EUVD-2024-50617	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12128	7 Dec 202410:15	–	nvd
Patchstack	WordPress Simple Ecommerce Shopping Cart plugin <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter vulnerability	6 Dec 202422:18	–	patchstack
Positive Technologies	PT-2024-17451 · WordPress · The Simple Ecommerce Shopping Cart Plugin	7 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12128	23 May 202509:28	–	redhatcve
Vulnrichment	CVE-2024-12128 Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal <= 3.1.2 - Reflected Cross-Site Scripting via monthly_sales_current_year Parameter	7 Dec 202409:27	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

Vulners

Node

nshowketgmailcom simple_ecommerce_shopping_cart_plugin-_sell_products_through_paypalRange≤3.1.2wordpress

[
  {
    "vendor": "nshowketgmailcom",
    "product": "Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.1.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/c7d688af-649c-4858-9c63-b12933d78bc2
wordpress	www.wordpress.org/plugins/simple-e-commerce-shopping-cart/

15 Apr 2026 00:35Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.01989

SSVC

CWE-79