WP EasyCart
levelfourdevelopment
Developer
5.9.1
Latest version
3,000
Installations
No date
Last updated
Vulnerability history
1 present
21 patched
0 Mitigation rules
- SQL Injection vulnerability<= 5.9.102/07/2026
- SQL Injection vulnerability<= 5.8.1327/02/2026
- Sensitive Data Exposure vulnerability<= 5.8.1108/12/2025
- Missing Authorization to Order Updates vulnerability<= 5.7.807/01/2025
- Authenticated (Contributor+) SQL Injection via model_number Parameter vulnerability<= 5.7.219/08/2024
- Broken Access Control vulnerability<= 5.5.1903/06/2024
- Sensitive Information Exposure vulnerability<= 5.6.410/05/2024
- Authenticated (Contributor+) SQL Injection vulnerability<= 5.6.315/04/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 5.5.1912/04/2024
- Authenticated (Administrator+) SQL Injection via 'orderby' vulnerability<= 5.4.1012/06/2023
- Cross-Site Request Forgery via process_delete_product vulnerability<= 5.4.829/05/2023
- Cross-Site Request Forgery via process_bulk_delete_product vulnerability<= 5.4.829/05/2023
- Cross-Site Request Forgery via process_bulk_deactivate_product vulnerability<= 5.4.829/05/2023
- Cross-Site Request Forgery via process_deactivate_product vulnerability<= 5.4.829/05/2023
- Cross-Site Request Forgery via process_duplicate_product vulnerability<= 5.4.829/05/2023
- Cross-Site Request Forgery via process_bulk_activate_product vulnerability<= 5.4.829/05/2023
- Admin+ LFI vulnerability< 5.4.304/04/2023
- Arbitrary Design Settings Update via Cross-Site Request Forgery (CSRF) vulnerability<= 5.2.428/03/2022
- Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)<= 5.1.018/08/2021
- Privilege Escalation<= 3.0.2026/02/2015
- Unrestricted File Upload<= 3.0.810/02/2015
- Information Disclosure<= 2.0.511/07/2014