Levelfourstorefront vulnerabilities

Products

• Shopping Cart & Ecommerce Store 13

Newest

• levelfourstorefront shopping cart & ecommerce store Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action CVE-2026-17553 7.2 HighSeptember 9, 2026
• levelfourstorefront shopping cart & ecommerce store Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter CVE-2026-17589 4.9 MediumSeptember 1, 2026
• levelfourstorefront shopping cart & ecommerce store Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates CVE-2024-12712 5.3 MediumJanuary 8, 2025
• levelfourstorefront shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 more Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter CVE-2024-7827 8.8 HighAugust 20, 2024
• levelfourstorefront shopping cart & ecommerce store, shopping cart \& ecommerce store +1 more Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure CVE-2024-4213 5.3 MediumMay 10, 2024
• levelfourstorefront shopping cart & ecommerce store, wp easycart shopping cart and ecommerce store +1 more Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection CVE-2024-3211 8.8 HighApril 12, 2024
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' CVE-2023-3023 7.2 HighJuly 12, 2023
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product CVE-2023-2892 6.5 MediumJune 9, 2023
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product CVE-2023-2894 4.3 MediumJune 9, 2023
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product CVE-2023-2893 4.3 MediumJune 9, 2023
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product CVE-2023-2896 4.3 MediumJune 9, 2023
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product CVE-2023-2895 4.3 MediumJune 9, 2023
• wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 more WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product CVE-2023-2891 6.5 MediumJune 9, 2023