5.3
Medium
CVE-2024-12712 The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a…
Description
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Shopping Cart & eCommerce Store 5.7 | earliest → 5.7.8 | No fix stated |
Other CVEs of Shopping Cart & eCommerce Store
The 13 CVEs of Shopping Cart & eCommerce Store →
CVE-2026-17553
The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.9.3
7.2
High
CVE-2026-17589
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the…
4.9
Medium
CVE-2024-7827
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to boolean-based SQL Injection via the…
8.8
High
CVE-2024-4213
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions…
5.3
Medium