etemplates
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ECT Add to Cart Button | 1 | – | Jan 16, 2025 |
| ECT Product Carousel | 1 | – | Dec 16, 2024 |
| ECT Social Share | 1 | – | Dec 16, 2024 |
Exploited and recent CVEs
- CVE-2025-23471 WordPress ECT Add to Cart Button plugin <= 1.4 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2024-54405 WordPress ECT Social Share plugin <= 1.3 - CSRF to Stored XSS vulnerability 0.2%
- CVE-2024-54412 WordPress ECT Product Carousel plugin <= 1.9 - CSRF to Stored Cross-Site Scripting vulnerability 0.2%