Medium · 5.4 CVE-2023-51533 EUVD-2023-56245GHSA-jfh3-wq2r-73gg

WordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Ecwid Ecommerce Product: Ecwid Ecommerce Shopping Cart

Description

Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart.This issue affects Ecwid Ecommerce Shopping Cart: from n/a through 6.12.4.

Affected products

Vendor	Product	Affected	Fixed
Ecwid Ecommerce	Ecwid Ecommerce Shopping Cart	≤ 6.12.4	—

References

https://patchstack.com/database/vulnerability/ecwid-shopping-cart/wordpress-ecwid-ecommerce-shopping-cart-plugin-6-12-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry