wpstorecart-exploit

PoC simple del exploit del plugin wpstorecart anterior a la versión 2.5.30 CVE-2012-3576 escrito en bash...

WordPress wpstorecart plugin <= 5.0.7 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by reconnaissance in WordPress Plugin WPStoreCart versions = 5.0.7...

CVE-2026-84099

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

CVE-2026-84099

The wpstorecart WordPress plugin (versions

CVE-2026-84099 IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

EUVD-2026-76794

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

CVE-2026-84099: Deserialization of Untrusted Data

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

PT-2026-90578

Name of the Vulnerable Software and Affected Versions wpstorecart versions prior to 5.0.8 Description The plugin fails to prevent direct, unauthenticated access to a bundled add-on located at 'paypal.php' within the wpsc-membership-pro component. This allows unauthenticated attackers to inject...

wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

The wpstorecart WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Wordpress wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Do...

WordPress wpStoreCart Plugin 'upload.php' Arbitrary File Upload Vulnerability

WordPress wpStoreCart Plugin is prone to file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress wpStoreCart 2.5.29 File Upload

File upload vulnerability in WordPress wpStoreCart plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2012-3576

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

CVE-2012-3576

The CVE-2012-3576 issue affects the WordPress wpStoreCart plugin (notably versions 2.5.27–2.5.29). It is an Arbitrary File Upload vulnerability in upload.php that allows an attacker to upload a file with an executable extension and then access it via uploads/wpstorecart to execute code on the ser...

CVE-2012-3576: Undefined Security Weakness

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

CVE-2012-3576

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Dork :...

WordPress WPStoreCart Plugin 2.5.27 - 2.5.29 - Arbitrary File Upload

WPStoreCart plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible. Solutio...

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins :...

WordPress wpStoreCart 2.5.29 Shell Upload

Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Dork :...