WordPress Plugin Vulnerabilities

WP eCommerce 3.8.9 - Cross-Site Scripting (XSS)

Description

The WP eCommerce WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wp-e-commerce
Fixed in 3.8.9.1

References

URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/80048

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f3b1487e-815d-4c58-8399-3bafdf576094

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2026-01-08
Title
Entry Views <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2024-11-28
Title
Podlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS
Published
2024-12-05
Title
WP Media Optimizer (.webp) <= 1.4.0 - Reflected Cross-Site Scripting via wpmowebp-css-resources and wpmowebp-js-resources Parameters
Published
2023-06-19
Title
Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG
Published
2023-11-06
Title
Telephone Number Linker <= 1.2 - Contributor+ Stored XSS