CVE-2026-104642

The Simple Shopping Cart WordPress plugin (versions 5.1.3 - 5.3.2 ) is vulnerable to a Price Manipulation issue due to a Price Verification Bypass . The root cause is the plugin's failure to verify submitted product prices against values set exclusively by the site owner. This allows users with t...

CVE-2026-104642 Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen prices for existing products, which any visitor can then use to add those...

CVE-2026-104642 Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen prices for existing products, which any visitor can then use to add those...

PT-2026-83405

Name of the Vulnerable Software and Affected Versions Appointment Booking Calendar Plugin and Scheduling Plugin versions prior to 1.6.3 Description This issue occurs when the plugin fails to verify the actual amount paid against the server-side price staged for a booking during the confirmation o...