Mra13 vulnerabilities
We track 5 vulnerabilities in Mra13 products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on April 23, 2025.
Latest Mra13 vulnerabilities
- 7.5 High severity
Simple Shopping Cart: External Control of Assumed-Immutable Web Parameter
The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plug
- 8.2 High severity
Simple Shopping Cart: Insertion of Sensitive Information Into Sent Data
The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive
- 7.6 High severity
Simple Download Monitor: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mra13 Simple Download Monitor simple-download-monitor allows Blind SQL Injection.This issue affects Simple Download Monitor: from n/a through <= 3.9.25.
- 8.2 High severity
Stripe Payments: Missing Authorization
Missing Authorization vulnerability in mra13 Stripe Payments stripe-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stripe Payments: from n/a through <= 2.0.79.
- 7.5 High severity
Simple Membership: Exposure of Sensitive Information to an Unauthorized Actor
The Simple Membership plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.5.5 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from po