shopping_cart_and_ecommerce_store vulnerabilities

2 known vulnerabilities in shopping_cart_and_ecommerce_store from WP EasyCart. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  wp-cart-for-digital-products: Cross-Site Request Forgery

  CVE-2024-6075Jul 15, 2024Wp-cart-for-digital-products

  The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

• 8.8 High severity

  Shopping Cart & eCommerce Store: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3211Apr 12, 2024Levelfourstorefront

  The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ec_addtocart shortcode in all versions up to, and including, 5.6.3 due to insufficient escaping on the user supplied parameter and lack