Plugin icon

WP eCommerce

wp-e-commerce
Plugin closed

Vulnerabilities:

13

Last Updated:

August 21, 2020

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-13
Title
WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2026-01-21
Title
WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2024-02-27
Title
WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2016-11-12
Title
WP eCommerce <= 3.11.3 - SQL Injection in sessionid
Fixed in
Fixed in 3.11.4
CVSS
n/a
Published
2015-04-20
Title
WP eCommerce <= 3.9.2 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.9.3
CVSS
n/a
Published
2015-02-09
Title
WP eCommerce 3.8.9.5 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.8.12
CVSS
n/a
Published
2015-02-09
Title
WP eCommerce <= 3.8.6 - SQL Injection
Fixed in
Fixed in 3.8.6.1
CVSS
n/a
Published
2014-11-01
Title
WP eCommerce <= 3.8.14.3 - Authorisation Bypass
Fixed in
Fixed in 3.8.14.4
CVSS
n/a
Published
2014-10-05
Title
WP eCommerce <= 3.8.7.5 - Unspecified SQL Injection
Fixed in
Fixed in 3.8.7.6
CVSS
n/a
Published
2014-08-01
Title
WP eCommerce 3.8.6 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.8.8
CVSS
n/a
Published
2014-08-01
Title
WP eCommerce 3.8.9 - SQL Injection
Fixed in
Fixed in 3.8.9.1
CVSS
n/a
Published
2014-08-01
Title
WP eCommerce 3.8.9 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.8.9.1
CVSS
n/a