eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

Description The plugin does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products PoC Make a logged in admin open the URL below...

eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRF

Description The plugin does not have CSRF checks in some of its admin pages, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as delete all products Make a logged in admin open the URL below...

CVE-2023-46642

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...

Online Retailers: Five Threats Targeting Your Business This Holiday Shopping Season

As the holiday season approaches, a palpable sense of joy and anticipation fills the air. Twinkling lights adorn homes, the aroma of freshly baked cookies wafts through the kitchen, and the sound of laughter and carolers melodies resonate on frosty evenings. Its a time when families come together...

EC-CUBE Security Vulnerability

EC-CUBE is an open source e-commerce system from EC-CUBE Japan. A security vulnerability exists in EC-CUBE 3 series 3.0.0 to 3.0.18-p6 and 4 series 4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2 releases, which is caused by an arbitrary code execution vulnerability due to improper...

PrestaShop Kerawen Security Vulnerability

PrestaShop KerAwen is an e-commerce cash register solution from PrestaShop USA. A security vulnerability exists in PrestaShop Kerawen versions prior to v2.5.1 that stems from the parameter ocsidcart containing an SQL injection vulnerability...

Why Bad Bots Are the Digital Demons of the Internet

In the dimly lit corners of the internet, where shadows flicker and eerie silences prevail, there lurks entities of malevolent intent. They are not the stuff of old wives tales or campfire ghost stories. We’re talking about bad bots, the digital bogeymen of the digital age. These nefarious beings...

WordPress Product Recommendation Quiz for eCommerce Plugin <= 2.1.2 is vulnerable to Broken Access Control

Software Product Recommendation Quiz for eCommerce Type Plugin Vulnerable versions = 2.1.2 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46631 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID aca78f403747 Credits...

SPA-Cart eCommerce CMS Cross-Site Request Forgery Vulnerability

SPA-Cart eCommerce CMS is a CMS system from SPA-Cart Inc. A security vulnerability exists in SPA-Cart eCommerce CMS version 1.9.0.3 that stems from the presence of a cross-site request forgery CSRF vulnerability. An attacker can exploit the vulnerability to delete all accounts...

CVE-2023-40561

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

CVE-2023-40561

CVE-2023-40561 is a CSRF vulnerability in the Dotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin (versions

CVE-2023-40561 Enhanced Ecommerce Google Analytics for WooCommerce

Cross-Site Request Forgery CSRF vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugin = 3.7.1 versions...

WordPress Plugin Enhanced Ecommerce Google Analytics for WooCommerce Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Enhanced Ecommerce...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts, and product image scaling. PrestaShop has a security vulnerability that stems from not checking access rights...

CVE-2023-41241

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin = 2.5.0 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin = 2.5.0 versions...

Path traversal

Path traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain partial information of the files on the web server...

CVE-2023-41241 WordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in SureCart WordPress Ecommerce For Creating Fast Online Stores plugin = 2.5.0 versions...

CVE-2023-41241

CVE-2023-41241 affects SureCart WordPress Ecommerce For Creating Fast Online Stores plugin; vulnerable component is the admin-level Stored XSS in the plugin’s input handling, allowing stored XSS when authenticated as Administrator. Affected versions are