2579 matches found
CVE-2026-57360
CVE-2026-57360 affects the WordPress plugin eCommerce Product Catalog (versions ≤ 3.5.4). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) issue. The connected documents provide the affected product and vulnerability type, with no exploit details or remediation/version fix infor...
EUVD-2026-37626
Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget = 4.2.3 versions...
EUVD-2026-37599
Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...
CVE-2026-52698
Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget = 4.2.3 versions...
CVE-2026-40747
Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...
CVE-2026-52698
The CVE concerns the WordPress PushEngage plugin (versions
CVE-2026-40747 WordPress Ecommerce Zone theme <= 0.9.7 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...
CVE-2026-40747
CVE-2026-40747 affects the WordPress Ecommerce Zone theme (versions <= 0.9.7) and is an Arbitrary File Upload vulnerability. The connected documents confirm a subscriber Arbitrary File Upload issue in Ecommerce Zone
EUVD-2026-36966
Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery = 2.6.62 versions...
CVE-2026-52693
Unauthenticated SQL Injection in eCommerce Product Catalog = 3.5.5 versions...
CVE-2026-39583
Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery = 2.6.62 versions...
CVE-2026-52693
The CVE-2026-52693 entry concerns the WordPress plugin “eCommerce Product Catalog” (versions
EUVD-2026-36900
Unauthenticated SQL Injection in eCommerce Product Catalog = 3.5.5 versions...
CVE-2026-52693 WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in eCommerce Product Catalog = 3.5.5 versions...
CVE-2026-52693 WordPress eCommerce Product Catalog plugin <= 3.5.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in eCommerce Product Catalog = 3.5.5 versions...
CVE-2026-39583
The CVE-2026-39583 entry concerns WordPress plugin Datalogics Ecommerce Delivery (versions
CVE-2026-39583 WordPress Datalogics Ecommerce Delivery plugin <= 2.6.62 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery = 2.6.62 versions...
PT-2026-49518
Unauthenticated SQL Injection in eCommerce Product Catalog = 3.5.5 versions...
PT-2026-49401
Unauthenticated Privilege Escalation in Datalogics Ecommerce Delivery = 2.6.62 versions...
WordPress WP eCommerce plugin <= 3.15.1 - Coupon Deletion via CSRF vulnerability
Coupon Deletion via CSRF vulnerability discovered by Bob Matyas in WordPress Plugin WP eCommerce versions = 3.15.1...