6.5
Moyenne
CVE-2023-2892 The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8
Description
The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_bulk_delete_product function. This makes it possible for unauthenticated attackers to bulk delete products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Shopping Cart & eCommerce Store 5.4 | premières → 5.4.8 | Pas de correctif indiqué |
Autres CVE de Shopping Cart & eCommerce Store
Les 13 CVE de Shopping Cart & eCommerce Store →
CVE-2026-17553
The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.9.3
7.2
Élevée
CVE-2026-17589
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the…
4.9
Moyenne
CVE-2024-12712
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a…
5.3
Moyenne
CVE-2024-7827
The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to boolean-based SQL Injection via the…
8.8
Élevée