Simple Shopping Cart vulnerabilities

2 known vulnerabilities in Simple Shopping Cart from Mra13. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Simple Shopping Cart: External Control of Assumed-Immutable Web Parameter

  CVE-2025-3530Apr 23, 2025Mra13

  The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plug

• 8.2 High severity

  Simple Shopping Cart: Insertion of Sensitive Information Into Sent Data

  CVE-2025-3529Apr 23, 2025Mra13

  The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive