Skip to content
OpenAdvisories

Vendor

cedcommerce

8 known vulnerabilities.

Products

WP Advanced PDF 2 Product Lister for eBay 1 CedCommerce Integration for Good Market 1 Recently viewed and most viewed products 1 One Click Order Re-Order 1 Ship Per Product 1 Wholesale Market 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-14279

    Wholesale Market <= 2.2.2 - Authenticated (Subscriber+) Privilege Escalation via 'role_required' Parameter

    The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the ced_wholesale_request_send AJAX action. The ced_wholesale_request_send_callback() handler only verifies a nonce (which is exposed t…

    cedcommerce Wholesale Market Web / CMS
  • High 7.5
    CVE-2025-68877

    WordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce CedCommerce Integration for Good Market ced-good-market-integration allows PHP Local File Inclusion.This issue affects CedComm…

    cedcommerce CedCommerce Integration for Good Market
  • High 7.5
    CVE-2025-39384

    WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cedcommerce Product Lister for eBay product-lister-ebay allows PHP Local File Inclusion.This issue affects Product Lister for eBay: from n…

    cedcommerce Product Lister for eBay