Wp-cart-for-digital-products (Unknown) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-12. Vendor: Unknown.
CVEs of Wp-cart-for-digital-products
- CVE-2024-6133 - CVSS 6.5 (medium), 2024-08-12: The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-6136 - CVSS 5.4 (medium), 2024-08-12: The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users…
- CVE-2024-6134 - CVSS 5.4 (medium), 2024-08-12: The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-6074 - CVSS 6.1 (medium), 2024-07-15: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-6073 - CVSS 6.1 (medium), 2024-07-15: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-6076 - CVSS 6.1 (medium), 2024-07-15: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
- CVE-2024-6072 - CVSS 6.1 (medium), 2024-07-15: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an…
- CVE-2024-6075 - CVSS 8.8 (high), 2024-07-15: The wp-cart-for-digital-products WordPress plugin before 8.5.5 does not have CSRF checks in some places, which could allow attackers to make logged in users…
