Tipsandtricks-hq
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart: vulnerabilidades y CVE
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-3890 | Media (5.4) | 0.28% | — | 1 may 2025 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' shortcode in all versions up to, and including, 5.1.3 due to insufficient input… |
| CVE-2025-3889 | Media (5.3) | 0.36% | — | 1 may 2025 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the 'process_payment_data' due to missing validation on a user… |
| CVE-2025-3874 | Media (6.5) | 0.41% | — | 1 may 2025 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 due to lack of randomization of a user controlled key. This makes it… |
| CVE-2023-6497 | Media (4.8) | 0.30% | — | 27 ene 2024 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automatic redirect URL setting in all versions up to and including 4.7.1 due to insufficient input… |
| CVE-2023-1431 | Media (5.3) | 0.55% | — | 16 mar 2023 | The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible… |
| CVE-2022-4672 | Media (5.4) | 0.53% | — | 23 ene 2023 | The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as… |
| CVE-2013-2705 | Media (6.8) | 1.1% | — | 13 may 2014 | Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that… |
Otros productos de Tipsandtricks-hq
WP Affiliate Platform · 11WP Emember · 11ALL IN ONE WP Security & Firewall · 11Simple Download Monitor · 9WP Estore · 8Compact WP Audio Player · 6WP Video Lightbox · 4WP Express Checkout · 4Category Specific RSS Feed Subscription · 3Software License Manager · 3Simple Photo Gallery · 1Donations VIA Paypal · 1