CedCommerce vulnerabilities
We track 3 vulnerabilities in CedCommerce products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2026.
Latest CedCommerce vulnerabilities
- 8.8 High severity
Wholesale Market: Improper Privilege Management
The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the ced_wholesale_request_send AJAX action. The ced_wholesale_request_send_callback() handler only verifies a nonce (which is exposed to
- 7.5 High severity
CedCommerce Integration for Good Market: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce CedCommerce Integration for Good Market ced-good-market-integration allows PHP Local File Inclusion.This issue affects CedComme
- 7.5 High severity
Product Lister for eBay: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay product-lister-ebay allows PHP Local File Inclusion.This issue affects Product Lister for eBay: from n/