VendorsLightspeed HQecwid_ecommerce_shopping_cartany version
Vulnerabilities

Lightspeed HQ Ecwid Ecommerce Shopping Cart any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2022-2432
Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update
Published 2022-09-06 · Modified
8.8EPSS 0.006
CVE-2023-24377
WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-02-14 · Modified
8.8EPSS 0.003
CVE-2023-24408
WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-05-08 · Modified
6.5EPSS 0.004
CVE-2023-51533
WordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2024-02-28 · Modified
6.1EPSS 0.002
CVE-2023-6292
Ecwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF
Published 2024-01-16 · Modified
4.3EPSS 0.002
CVE-2024-13795
Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message
Published 2025-02-18 · Analyzed
4.3EPSS 0.002