WordPress fs-shopping-cart plugin SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in version 2.07.02 of the WordPress fs-shopping-cart plugin. The...

CVE-2016-10951

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

Sql injection

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

CVE-2016-10951

CVE-2016-10951 affects the WordPress plugin fs-shopping-cart (version 2.07.02). The vulnerability is an SQL injection via the pid parameter, demonstrated by PoCs showing unescaped input in the admin context (e.g., UNION SELECT payloads). Connected documents corroborate an authenticated SQL inject...

CVE-2016-10951

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

CVE-2016-10951: Improper Neutralization of Special Elements used in an SQL Command

The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...

PT-2019-7744

Name of the Vulnerable Software and Affected Versions fs-shopping-cart plugin version 2.07.02 for WordPress Description The issue is related to SQL injection via the pid parameter. This allows for potential exploitation. Recommendations For fs-shopping-cart plugin version 2.07.02, consider...

CVE-2019-5992

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5992

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5992

The CVE-2019-5992 entry concerns the WordPress plugin WordPress Ultra Simple Paypal Shopping Cart (versions 4.4 and earlier). The vulnerability is Cross-Site Request Forgery (CSRF) that can allow an attacker to hijack an administrator’s authenticated actions via unspecified vectors. Documented im...

CVE-2019-5992

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2019-5992

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2019-17922

Name of the Vulnerable Software and Affected Versions WordPress Ultra Simple Paypal Shopping Cart versions 4.4 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For...

CVE-2019-5992: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in WordPress Ultra Simple Paypal Shopping Cart v4.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

PT-2019-13909 · Woocommerce · Woocommerce Paypal Checkout Payment Gateway

Name of the Vulnerable Software and Affected Versions: WooCommerce PayPal Checkout Payment Gateway plugin version 1.6.17 Description: The issue allows for parameter tampering in the amount parameter, such as amount 1, in the cgi-bin/webscr?cmd= cart endpoint. This can be exploited to purchase an...

Magecart Hackers Compromise 80 More eCommerce Sites to Steal Credit Cards

Cybersecurity researchers have discovered over 80 Magecart compromised e-commerce websites that were actively sending credit card information of online shoppers to the attackers-controlled servers. Operating their businesses in the United States, Canada, Europe, Latin America, and Asia, many of...

CVE-2019-7857

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation...

CVE-2019-7865

A cross-site request forgery CSRF vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration...

CVE-2019-7857

CVE-2019-7857 affects Magento 2.x: Magento 2.1 before 2.1.18, 2.2 before 2.2.9, and 2.3 before 2.3.2 are vulnerable to CSRF due to an insufficient anti-CSRF token implementation, allowing manipulation that can add items to a shopper’s cart. Root cause is weak CSRF protection in the checkout/cart ...