WP eCommerce vulnerabilities

1 known vulnerability in WP eCommerce from Justinsainton. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WP eCommerce: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-1514Feb 28, 2024Justinsainton

  The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation