WP EasyCart vulnerabilities
We track 2 vulnerabilities in WP EasyCart products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest WP EasyCart vulnerabilities
- 8.8 High severity
wp-cart-for-digital-products: Cross-Site Request Forgery
The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
- 8.8 High severity
Shopping Cart & eCommerce Store: Improper Neutralization of Special Elements used in an SQL Command
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ec_addtocart shortcode in all versions up to, and including, 5.6.3 due to insufficient escaping on the user supplied parameter and lack