Skip to content
OpenAdvisories

Vendor

ecwid

4 known vulnerabilities.

Products

Ecwid by Lightspeed Ecommerce Shopping Cart 3 Ecwid Ecommerce Shopping Cart 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-1750

    Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access

    The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7. This is due to a missing capability check in the 'save_custom_user_profile_fields' function. This makes it …

    ecwid Ecwid by Lightspeed Ecommerce Shopping Cart Web / CMS
  • High 8.8
    CVE-2022-2432

    Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update

    The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23. This is due to missing or incorrect nonce validation on the ecwid_update_plugin_params function. This makes it possib…

    ecwid Ecwid Ecommerce Shopping Cart Web / CMS