Skip to content
OpenAdvisories
High · 8.5 CVE-2026-32422 EUVD-2026-11949GHSA-29xj-6jjp-m927

WordPress WP EasyCart plugin <= 5.8.13 - SQL Injection vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Blind SQL Injection.This issue affects WP EasyCart: from n/a through <= 5.8.13.

Affected products

VendorProductAffectedFixed
levelfourdevelopment WP EasyCart ≤ 5.8.13 —

References