Skip to content
OpenAdvisories

Vendor

WP EasyCart

3 known vulnerabilities.

Products

WP EasyCart 2 Shopping Cart & eCommerce Store 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-34645

    Shopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, …

    WP EasyCart Shopping Cart & eCommerce Store Web / CMS