Skip to contentUnknown Shopp vulnerabilities
- mra13 simple shopping cartSimple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification BypassCVE-2026-1046422.7 Low
- mra13 simple shopping cartSimple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN RecipientCVE-2026-1046415.3 Medium
- unknown product feed for google shopping, microsoft advertising and 40+ channels for woocommerce merchantProduct Feed for Google Shopping < 5.3.2 - Unauthenticated Forced Store RegistrationCVE-2026-879685.3 Medium
- mra13 simple shopping cartSimple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API CredentialsCVE-2026-1041193.5 Low
- levelfourstorefront shopping cart & ecommerce storeShopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX ActionCVE-2026-175537.2 High
- levelfourstorefront shopping cart & ecommerce storeShopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' ParameterCVE-2026-175894.9 Medium
- ecwid by lightspeed ecommerce shopping cart, unknown ecwid by lightspeed ecommerce shopping cart +1 moreEcwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' ActionCVE-2026-143325.4 Medium
- unknown real wp shop lite ajax ecommerce shopping cartReal WP Shop Lite Ajax eCommerce Shopping Cart <= 2.0.8 - Admin+ Stored XSSCVE-2024-111403.5 Low
- levelfourstorefront shopping cart & ecommerce storeShopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order UpdatesCVE-2024-127125.3 Medium
- levelfourstorefront shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number ParameterCVE-2024-78278.8 High
- levelfourstorefront shopping cart & ecommerce store, shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information ExposureCVE-2024-42135.3 Medium
- levelfourstorefront shopping cart & ecommerce store, wp easycart shopping cart and ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL InjectionCVE-2024-32118.8 High
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreWordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-515335.4 Medium
- lightspeedhq ecwid ecommerce shopping cartEcwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRFCVE-2023-62924.3 Medium
- cmscommander wp shopping pagesWP Shopping Pages <= 1.14 - Stored XSS via CSRFCVE-2023-34926.8 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'CVE-2023-30237.2 High
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_productCVE-2023-28926.5 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_productCVE-2023-28944.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_productCVE-2023-28934.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_productCVE-2023-28964.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_productCVE-2023-28954.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_productCVE-2023-28916.5 Medium
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreWordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-244086.5 Medium
- unknown shopping cart & ecommerce store, wpeasycart wp easycart +1 moreShopping Cart & eCommerce Store < 5.4.3 - Admin+ LFICVE-2023-11247.2 High
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreWordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-243774.3 Medium
- mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 moreWordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via ShortcodeCVE-2022-46725.4 Medium
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreEcwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options UpdateCVE-2022-24328.8 High
- dpl sync woocommerce product feed to google shoppingSync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLiCVE-2021-250687.2 High
- conversios, unknown conversios.io – google analytics and google shopping plugin for woocommerce +1 moreConversios.io < 4.6.2 - Subscriber+ SQL InjectionCVE-2021-249528.8 High
- unknown wordpress simple ecommerce shopping cart plugin- sell products through paypal, simple-e-commerce-shopping-cart project simple-e-commerce-shopping-cart +1 moreSimple eCommerce <= 2.2.5 - Arbitrary File UploadCVE-2021-246208.8 High
- ingenesis shoppShopp eCommerce <= 1.4 - Unauthenticated Arbitrary File UploadCVE-2021-244939.8 Critical
- unknown shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2021-346458.8 High