wpstorecart-exploit

Simple PoC of wpstorecart before 2.5.30 plugin exploit CVE-2012-3576 written in bash...

WordPress wpstorecart plugin <= 5.0.7 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by reconnaissance in WordPress Plugin WPStoreCart versions = 5.0.7...

CVE-2026-84099

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

CVE-2026-84099

The wpstorecart WordPress plugin (versions

EUVD-2026-76794

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

CVE-2026-84099 IDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.php

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

CVE-2026-84099: Deserialization of Untrusted Data

The wpstorecart WordPress plugin through 5.0.7 does not prevent direct, unauthenticated access to a bundled add-on that deserializes user-supplied input without restricting the permitted classes, allowing unauthenticated attackers to inject arbitrary PHP objects, which may be escalated further wh...

PT-2026-90578

Name of the Vulnerable Software and Affected Versions wpstorecart versions prior to 5.0.8 Description The plugin fails to prevent direct, unauthenticated access to a bundled add-on located at 'paypal.php' within the wpsc-membership-pro component. This allows unauthenticated attackers to inject...

wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

The wpstorecart WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Wordpress wpStoreCart Plugin 2.5.27-2.5.29 Arbitrary File Upload

No description provided by source. Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Do...

WordPress wpStoreCart Plugin 'upload.php' Arbitrary File Upload Vulnerability

WordPress wpStoreCart Plugin is prone to file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress wpStoreCart 2.5.29 File Upload

File upload vulnerability in WordPress wpStoreCart plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2012-3576

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

CVE-2012-3576

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

CVE-2012-3576: Undefined Security Weakness

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

CVE-2012-3576

Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart...

PT-2012-4822

Name of the Vulnerable Software and Affected Versions wpStoreCart plugin versions prior to 2.5.30 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the php/upload.php endpoint, and then accessing it via a direct request to...

CVE-2012-3576

The CVE-2012-3576 issue affects the WordPress wpStoreCart plugin (notably versions 2.5.27–2.5.29). It is an Arbitrary File Upload vulnerability in upload.php that allows an attacker to upload a file with an executable extension and then access it via uploads/wpstorecart to execute code on the ser...

WordPress wpStoreCart 2.5.29 Shell Upload

Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins : http://downloads.wordpress.org/plugin/wpstorecart.2.5.29.zip Date : 03-06-2012 Google Dork :...

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload

WordPress Plugin wpStoreCart 2.5.27-2.5.29 - Arbitrary File Upload Description : Wordpress Plugins - wpStoreCart Arbitrary File Upload Vulnerability Version : 2.5.27 - 2.5.29 Link : http://wordpress.org/extend/plugins/wpstorecart/ Plugins :...