CVE-2024-32452

Cross-Site Request Forgery CSRF vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2024-35667

Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2023-3023

The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-2894

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkdeactivateproduct function. This makes it possible for unauthenticated attackers to bulk deactivate...

CVE-2023-2893

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeactivateproduct function. This makes it possible for unauthenticated attackers to deactivate products via ...

CVE-2023-2891

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processdeleteproduct function. This makes it possible for unauthenticated attackers to delete products via a forged...

CVE-2023-2892

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processbulkdeleteproduct function. This makes it possible for unauthenticated attackers to bulk delete products via...

CVE-2023-2896

The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the processduplicateproduct function. This makes it possible for unauthenticated attackers to duplicate products via a...

WordPress Shopping Cart & eCommerce Store plugin <= 5.7.8 - Missing Authorization to Order Updates vulnerability

Missing Authorization to Order Updates vulnerability discovered by Lucio Sá in WordPress Plugin WP EasyCart versions = 5.7.8...

WordPress Shopping Cart & eCommerce Store plugin <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter vulnerability

Authenticated Contributor+ SQL Injection via modelnumber Parameter vulnerability discovered by Lucio Sá in WordPress Plugin WP EasyCart versions = 5.7.2...

WordPress WP EasyCart Plugin <= 5.7.2 is vulnerable to SQL Injection

Software WP EasyCart Type Plugin Vulnerable versions = 5.7.2 Fixed in 5.7.3 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-7827 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 87563b6782da Credits Lucio Sá Required privilege Contributor Published 19...

CVE-2024-35667

Missing Authorization vulnerability in WP EasyCart.This issue affects WP EasyCart: from n/a through 5.5.19...

CVE-2024-35667

CVE-2024-35667: Missing Authorization vulnerability in WP EasyCart ≤ 5.5.19. Affected: WP EasyCart plugin for WordPress. Base CVSS 3.1 v3: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N; Base score 5.3 (Medium). Root cause/affected versions are stated; no exploit details or remediation are provided in the i...

WordPress plugin WP EasyCart security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WP EasyCart < 5.6.0 - Missing Authorization

Description The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 5.5.19. This makes it possible for unauthenticated attackers to perform an unauthorized action...

WordPress Shopping Cart & eCommerce Store plugin <= 5.5.19 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin WP EasyCart versions = 5.5.19...

WordPress WP EasyCart Plugin <= 5.5.19 is vulnerable to Broken Access Control

Software WP EasyCart Type Plugin Vulnerable versions = 5.5.19 Fixed in 5.6.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35667 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 392fd2a0a3c3 Credits Joshua Chan Required privilege...

WordPress Shopping Cart & eCommerce Store plugin <= 5.6.4 - Sensitive Information Exposure vulnerability

Sensitive Information Exposure vulnerability discovered by rptl in WordPress Plugin WP EasyCart versions = 5.6.4...

WordPress WP EasyCart Plugin <= 5.6.4 is vulnerable to Sensitive Data Exposure

Software WP EasyCart Type Plugin Vulnerable versions = 5.6.4 Fixed in 5.6.5 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-4213 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 947585bf2bdc Credits rptl Required privilege...

WordPress Shopping Cart & eCommerce Store plugin <= 5.6.3 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin WP EasyCart versions = 5.6.3...