WordPress Plugin Vulnerabilities

e-Commerce <= 3.4 - Arbitrary File Upload Exploit

Description

The wp-shopping-cart WordPress plugin was affected by an Arbitrary File Upload Exploit security vulnerability.

Affects Plugins

Plugin icon
wp-shopping-cart
No known fix

References

CVE
CVE-2008-6811
Exploitdb
6867

Miscellaneous

Verified
No
WPVDB ID
34554562-bcaf-4a4c-a1ff-4952658968b2

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-05-01
Title
All-in-One Video Gallery < 3.6.5 - Contributor+ Arbitrary File Upload via featured image
Published
2024-12-17
Title
WPLMS < 1.9.9.5.2 - Authenticated (Instructor+) Arbitrary File Upload
Published
2025-08-15
Title
StoryChief < 1.0.43 - Unauthenticated Arbitrary File Upload
Published
2024-01-17
Title
Unlimited Addons for WPBakery Page Builder <= 1.0.42 - Authenticated (Editor+) Arbitrary File Upload
Published
2024-12-30
Title
ACF City Selector < 1.15.0 - Authenticated (Admin+) Arbitrary File Upload