WP Easycart vulnerabilities

2 known vulnerabilities in WP Easycart from Wpeasycart. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Shopping Cart & eCommerce Store: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-3023Jul 12, 2023Levelfourstorefront

  The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S

• 7.2 High severity

  Shopping Cart & eCommerce Store: Files or Directories Accessible to External Parties

  CVE-2023-1124Apr 3, 2023Shopping Cart & eCommerce StoreEPSS 1.08%

  The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.