Levelfourstorefront vulnerabilities
We track 4 vulnerabilities in Levelfourstorefront products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2026.
Latest Levelfourstorefront vulnerabilities
- 7.2 High severity
Shopping Cart & eCommerce Store: Improper Privilege Management
The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.9.3. This is due to the ec_ajax_save_page_default_options() AJAX handler iterating over every $_POST key and passing it directly into update_option()
- 8.8 High severity
Shopping Cart & eCommerce Store: Improper Neutralization of Special Elements used in an SQL Command
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to boolean-based SQL Injection via the ‘model_number’ parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficien
- 8.8 High severity
Shopping Cart & eCommerce Store: Improper Neutralization of Special Elements used in an SQL Command
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ec_addtocart shortcode in all versions up to, and including, 5.6.3 due to insufficient escaping on the user supplied parameter and lack
- 7.2 High severity
Shopping Cart & eCommerce Store: Improper Neutralization of Special Elements used in an SQL Command
The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S