WordPress Plugin Vulnerabilities

WP eCommerce 3.8.6 - Cross-Site Scripting (XSS)

Description

The WP eCommerce WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wp-e-commerce
Fixed in 3.8.8

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
35c6ab17-9719-465e-8422-027e30210b1e

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2016-11-15 (about 9 years ago)

Other

Published
Title
Published
2022-06-14
Title
WP All Export < 1.3.6 - Reflected Cross-Site Scripting
Published
2025-07-22
Title
LearnPress Export Import < 4.1.0 - Reflected Cross-Site Scripting
Published
2024-12-18
Title
WP SuperBackup < 2.4 - Reflected Cross-Site Scripting
Published
2016-07-13
Title
Profile Builder < 2.4.2 - Reflected Cross-Site Scripting (XSS)
Published
2014-08-01
Title
geshi-source-colorer <= 0.13 - XSS in ZeroClipboard