WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ecommerce-product-catalog
Published
2025-06-22
Title
eCommerce Product Catalog < 3.4.4 - Authenticated (Orders manager+) PHP Object Injection
Slug
ecommerce-two-factor-authentication
Published
2021-10-25
Title
Ecommerce - Two Factor Authentication < 1.0.5 - Reflected Cross-Site Scripting
Slug
ecpay-ecommerce-for-woocommerce
Published
2025-01-30
Title
ECPay Ecommerce for WooCommerce < 1.1.2502030 - Missing Authorization to Authenticated (Subscriber+) Log Deletion
Slug
ecpay-logistics-for-woocommerce
Published
2019-09-05
Title
ECPay Logistics for WooCommerce < 1.3.1910240 - Unauthenticated Reflected XSS
Slug
ect-add-to-cart-button
Published
2025-01-16
Title
ECT Add to Cart Button <= 1.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ect-homepage-products
Published
2025-01-10
Title
ECT Home Page Products <= 1.9 - Reflected XSS
Slug
ect-product-carousel
Published
2024-12-12
Title
ECT Product Carousel <= 1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ect-social-share
Published
2024-12-12
Title
ECT Social Share <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ecwid-shopping-cart
Published
2016-08-08
Title
Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object Injection
Slug
ecwid-shopping-cart
Published
2022-08-04
Title
Ecwid Ecommerce Shopping Cart < 6.10.24 - Settings Update via CSRF
Slug
ecwid-shopping-cart
Published
2023-01-27
Title
Ecwid Shopping Cart < 6.11.4 - Import via CSRF
Slug
ecwid-shopping-cart
Published
2023-03-17
Title
Ecwid Shopping Cart < 6.11.5 - Contributor+ Stored Cross-Site Scriping
Slug
ecwid-shopping-cart
Published
2022-07-09
Title
Ecwid Shopping Cart < 6.10.23 - Insufficient Access Control
Slug
ecwid-shopping-cart
Published
2023-11-21
Title
Ecwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF
Slug
ecwid-shopping-cart
Published
2023-11-28
Title
Ecwid Ecommerce Shopping Cart < 6.12.5 - Cross-Site Request Forgery
Slug
ecwid-shopping-cart
Published
2023-11-07
Title
Ecwid Ecommerce Shopping Cart < 6.12.4 - Missing Authorization on multiple functions
Slug
ecwid-shopping-cart
Published
2024-03-29
Title
Ecwid Ecommerce Shopping Cart < 6.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ecwid-shopping-cart
Published
2025-02-17
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 6.12.28 - Cross-Site Request Forgery to Send Deactivation Message
Slug
ecwid-shopping-cart
Published
2025-04-04
Title
Ecwid Shopping Cart < 7.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ecwid-shopping-cart
Published
2026-01-19
Title
Ecwid Shopping Cart < 7.0.6 - Missing Authorization
Slug
ecwid-shopping-cart
Published
2026-01-12
Title
Ecwid Shopping Cart < 7.0.7 - Missing Authorization
Slug
ecwid-shopping-cart
Published
2026-02-14
Title
Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.8 - Subscriber+ Privilege Escalation
Slug
ed2k-link-selector
Published
2014-08-01
Title
ed2k-link-selector <= 1.1.7 - XSS in ZeroClipboard
Slug
edd-cashapp
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
edd-courses
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius