Skip to contentUnknown Shopping Cart & Ecommerce Store vulnerabilities
- levelfourstorefront shopping cart & ecommerce storeShopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX ActionCVE-2026-175537.2 High
- levelfourstorefront shopping cart & ecommerce storeShopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' ParameterCVE-2026-175894.9 Medium
- levelfourstorefront shopping cart & ecommerce storeShopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order UpdatesCVE-2024-127125.3 Medium
- levelfourstorefront shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number ParameterCVE-2024-78278.8 High
- levelfourstorefront shopping cart & ecommerce store, shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information ExposureCVE-2024-42135.3 Medium
- levelfourstorefront shopping cart & ecommerce store, wp easycart shopping cart and ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL InjectionCVE-2024-32118.8 High
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'CVE-2023-30237.2 High
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_productCVE-2023-28926.5 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_productCVE-2023-28944.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_productCVE-2023-28934.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_productCVE-2023-28964.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_productCVE-2023-28954.3 Medium
- wpeasycart wp easycart, levelfourstorefront shopping cart & ecommerce store +1 moreWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_productCVE-2023-28916.5 Medium
- unknown shopping cart & ecommerce store, wpeasycart wp easycart +1 moreShopping Cart & eCommerce Store < 5.4.3 - Admin+ LFICVE-2023-11247.2 High
- unknown shopping cart & ecommerce store, wpeasycart shopping cart \& ecommerce store +1 moreShopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2021-346458.8 High