Skip to content
OpenAdvisories

Vendor

ecwid

4 known vulnerabilities.

Products

Ecwid by Lightspeed Ecommerce Shopping Cart 3 Ecwid Ecommerce Shopping Cart 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-13795

    Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message

    The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27. This is due to missing or incorrect nonce validation on the ecwid_deactivate_feedback() function. T…

    ecwid Ecwid by Lightspeed Ecommerce Shopping Cart Web / CMS
  • Medium 6.4
    CVE-2024-2456

    Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

    The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 6.12.10 due to insufficient input sanitization and output escaping on user supplied attribu…

    ecwid Ecwid by Lightspeed Ecommerce Shopping Cart Web / CMS