ecwid
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ecwid by Lightspeed Ecommerce Shopping Cart | 3 | – | Feb 15, 2026 |
| Ecwid Ecommerce Shopping Cart | 1 | – | Sep 6, 2022 |
Exploited and recent CVEs
- CVE-2026-1750 Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access 0.3%
- CVE-2024-13795 Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message 0.2%
- CVE-2024-2456 Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%
- CVE-2022-2432 Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update 0.6%