CVE-2024-13795

The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27. This is due to missing or incorrect nonce validation on the ecwiddeactivatefeedback function. This makes it possible for unauthenticated...

WordPress Ecwid by Lightspeed Ecommerce Shopping Cart plugin <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message vulnerability

Cross-Site Request Forgery to Send Deactivation Message vulnerability discovered by Brian Sans-Souci liardom in WordPress Plugin Ecwid Shopping Cart versions = 6.12.27...