Llevelfourstorefront

Products

Exploited and recent CVEs

• CVE-2026-17553 High 7.2 Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action 0.6%
• CVE-2026-17589 Medium 4.9 Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter 0.5%
• CVE-2024-12712 Medium 5.3 Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates 0.4%
• CVE-2024-7827 High 8.8 Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter 0.5%
• CVE-2024-4213 Medium 5.3 Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure 0.5%
• CVE-2024-3211 High 8.8 Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection 0.6%
• CVE-2023-3023 High 7.2 WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' 0.7%
• CVE-2023-2892 Medium 6.5 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product 0.2%
• CVE-2023-2894 Medium 4.3 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product 0.2%
• CVE-2023-2893 Medium 4.3 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product 0.2%
• CVE-2023-2896 Medium 4.3 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product 0.2%
• CVE-2023-2895 Medium 4.3 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product 0.2%
• CVE-2023-2891 Medium 6.5 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product 0.2%