Medium
CVE-2026-94124
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 26
Reset filters
High
CVE-2026-17553
Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action
Medium
CVE-2026-17589
Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter
Medium
CVE-2026-57765
Shopping Cart & eCommerce Store <= 5.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-32422
EasyCart <= 5.8.13 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-62997
EasyCart <= 5.8.11 - Unauthenticated Information Exposure
Medium
CVE-2024-12712
Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates
High
CVE-2024-7827
Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter
Medium
CVE-2024-35667
WP EasyCart <= 5.5.19 - Missing Authorization
Medium
CVE-2024-4213
Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure
Medium
CVE-2024-32452
WP EasyCart <= 5.5.19 - Cross-Site Request Forgery
High
CVE-2024-3211
Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection
High
CVE-2023-3023
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
Medium
CVE-2023-2891
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product
Medium
CVE-2023-2892
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product
Medium
CVE-2023-2894
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product
Medium
CVE-2023-2893
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
Medium
CVE-2023-2896
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
Medium
CVE-2023-2895
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
High
CVE-2023-1124
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
Medium
6ebc1b85-4682-4467-b17c-9a35cc3f0f15
Shopping Cart & eCommerce Store <= 5.2.6 - Cross-Site Request Forgery
Medium
46258dc2-3e05-4050-baad-3b3ded912bfe
Shopping Cart & eCommerce Store <= 5.2.4 - Cross-Site Request Forgery to Settings Update
High
CVE-2021-34645
Shopping Cart & eCommerce Store <= 5.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
High
CVE-2015-2673
EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.