Mra13 vulnerabilities

Products

• Simple Shopping Cart 18
• Simple Download Monitor 14
• Affiliates Manager 12
• Accept Stripe Payments 2
• Compact Wp Audio Player 2
• Stripe Payments 2
• Wordpress Simple Shopping Cart 2

Newest

• mra13 simple download monitor Simple Download Monitor < 4.1.3 - Contributor+ Private Download Item Title and Description Disclosure via [sdm_show_download_info] Shortcode CVE-2026-118637 2.7 LowNovember 4, 2026
• mra13 simple shopping cart Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass CVE-2026-104642 2.7 LowOctober 21, 2026
• mra13 simple shopping cart Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient CVE-2026-104641 5.3 MediumOctober 21, 2026
• mra13 simple shopping cart Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials CVE-2026-104119 3.5 LowOctober 4, 2026
• mra13 stripe payments WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-78282 7.1 HighAugust 24, 2026
• mra13 affiliates manager WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability CVE-2026-73358 7.1 HighAugust 18, 2026
• mra13 affiliates manager WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability CVE-2026-73355 9.3 CriticalAugust 18, 2026
• mra13 affiliates manager WordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability CVE-2026-57654 6.5 MediumJune 26, 2026
• mra13 affiliates manager WordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerability CVE-2026-52692 7.5 HighJune 15, 2026
• mra13 simple shopping cart WordPress Simple Shopping Cart plugin <= 5.2.9 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-48868 7.5 HighJune 15, 2026
• mra13 accept stripe payments WordPress Plugin Stripe Payments < 2.0.40 Stored XSS via currency_code CVE-2021-47983 5.1 MediumJune 8, 2026
• mra13 simple shopping cart Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode CVE-2026-0552 6.4 MediumApril 4, 2026
• mra13 simple download monitor Simple Download Monitor <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field CVE-2026-2383 6.4 MediumFebruary 27, 2026
• code-projects simple shopping cart code-projects Simple Shopping Cart adminlogin.php sql injection CVE-2025-14248 6.9 MediumDecember 8, 2025
• code-projects simple shopping cart code-projects Simple Shopping Cart additems.php sql injection CVE-2025-14247 5.3 MediumDecember 8, 2025
• code-projects simple shopping cart code-projects Simple Shopping Cart settings.php sql injection CVE-2025-14246 5.3 MediumDecember 8, 2025
• mra13 simple download monitor Simple Download Monitor <= 3.9.33 - Simple Download Monitor <= 3.9.33 – Authenticated (Contributor+) SQL Injection via order parameter in Log Export functionality CVE-2025-8977 6.5 MediumAugust 28, 2025
• mra13 simple download monitor WordPress Simple Download Monitor Plugin <= 3.9.34 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58197 6.5 MediumAugust 27, 2025
• code-projects simple shopping cart code-projects Simple Shopping Cart register.php sql injection CVE-2025-7609 6.9 MediumJuly 14, 2025
• code-projects simple shopping cart code-projects Simple Shopping Cart userlogin.php sql injection CVE-2025-7608 6.9 MediumJuly 14, 2025
• code-projects simple shopping cart code-projects Simple Shopping Cart save_order.php sql injection CVE-2025-7607 6.9 MediumJuly 14, 2025
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-3890 6.4 MediumMay 1, 2025
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' CVE-2025-3889 5.3 MediumMay 1, 2025
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference CVE-2025-3874 6.5 MediumMay 1, 2025
• mra13 simple shopping cart WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation CVE-2025-3530 7.5 HighApril 23, 2025
• mra13 simple shopping cart WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter CVE-2025-3529 8.2 HighApril 23, 2025
• mra13 simple download monitor WordPress Simple Download Monitor plugin <= 3.9.25 - SQL Injection vulnerability CVE-2025-24663 7.6 HighJanuary 24, 2025
• mra13 compact wp audio player WordPress Compact WP Audio Player plugin <= 1.9.14 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-56279 6.4 MediumJanuary 7, 2025
• mra13 simple shopping cart WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12622 6.4 MediumDecember 24, 2024
• mra13 stripe payments WordPress Accept Stripe Payments plugin <= 2.0.79 - Broken Access Control vulnerability CVE-2023-48286 8.2 HighDecember 9, 2024
• mra13 simple membership Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor CVE-2024-11088 5.3 MediumNovember 21, 2024
• mra13 compact wp audio player Compact WP Audio Player <= 1.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_embed_player Shortcode CVE-2024-10176 6.4 MediumOctober 24, 2024
• mra13 accept stripe payments, tipsandtricks-hq accept stripe +1 more Accept Stripe Payments <= 2.0.86 - Authenticated (Contributor+) Stored Cross-Site Scripting via accept_stripe_payment_ng Shortcode CVE-2024-7353 5.4 MediumAugust 7, 2024
• mra13 affiliates manager Affiliates Manager <= 2.9.34 - Cross-Site Request Forgery CVE-2024-0859 4.3 MediumFebruary 5, 2024
• mra13 simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting CVE-2023-6497 4.4 MediumJanuary 27, 2024
• mra13 affiliates manager WordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure CVE-2023-52148 5.3 MediumJanuary 5, 2024
• mra13 affiliates manager WordPress Affiliates Manager Plugin <= 2.9.31 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-52130 4.3 MediumJanuary 5, 2024
• mra13 affiliates manager WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-28986 5.4 MediumJuly 10, 2023
• tipsandtricks-hq wp express checkout, mra13 wp express checkout (accept paypal payments easily) +1 more The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... CVE-2023-1469 4.4 MediumMarch 17, 2023
• mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure... CVE-2023-1431 5.3 MediumMarch 16, 2023
• mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 more WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode CVE-2022-4672 5.4 MediumJanuary 23, 2023
• mra13 affiliates manager Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting CVE-2022-2799 4.8 MediumSeptember 16, 2022
• mra13 affiliates manager Affiliates Manager < 2.9.14 - Affiliate CSV Injection CVE-2022-2798 8.0 HighSeptember 16, 2022
• mra13 simple download monitor Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal CVE-2021-24692 6.5 MediumMarch 14, 2022
• mra13 affiliates manager Affiliates Manager < 2.9.0 - Unauthenticated Stored Cross-Site Scripting CVE-2021-25078 6.1 MediumJanuary 24, 2022
• mra13 simple download monitor Simple Download Monitor < 3.9.9 - Multiple CSRF CVE-2021-24696 8.8 HighJanuary 24, 2022
• mra13 simple download monitor Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via Shortcodes CVE-2021-24694 5.4 MediumJanuary 24, 2022
• mra13 affiliates manager Affiliate Manager < 2.8.7 - Admin+ SQL injection CVE-2021-24844 7.2 HighNovember 8, 2021
• mra13 simple download monitor Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails Removal CVE-2021-24698 4.3 MediumNovember 8, 2021
• mra13 simple download monitor Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting CVE-2021-24697 6.1 MediumNovember 8, 2021
• Show olderLoading…