Vendorswpeasycartwp_easycartany version
Vulnerabilities

wpeasycart Wp Easycart any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2023-1124
Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
Published 2023-04-03 · Modified
7.2EPSS 0.011
CVE-2023-3023
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
Published 2023-07-12 · Modified
7.2EPSS 0.007
CVE-2014-9308
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in products/banners/.
Published 2015-01-15 · Modified
6.52 PoCEPSS 0.506
CVE-2023-2891
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product
Published 2023-06-09 · Modified
6.5EPSS 0.002
CVE-2023-2892
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product
Published 2023-06-09 · Modified
6.5EPSS 0.002
CVE-2023-2893
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
Published 2023-06-09 · Modified
4.3EPSS 0.002
CVE-2023-2894
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product
Published 2023-06-09 · Modified
4.3EPSS 0.002
CVE-2023-2895
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
Published 2023-06-09 · Modified
4.3EPSS 0.002
CVE-2023-2896
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
Published 2023-06-09 · Modified
4.3EPSS 0.002