Levelfourstorefront - vulnerabilities (CVEs)

13 CVEs in 2 products, 0 in the last 30 days, newest from 2026-09-09.

Products

• Shopping Cart Ecommerce Store - 13 CVEs
• Shopping Cart & Ecommerce Store - 1 CVEs

Newest CVEs of Levelfourstorefront

• CVE-2026-17553 - CVSS 7.2 (high), 2026-09-09: The WP EasyCart plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.9.3. This is due to the…
• CVE-2026-17589 - CVSS 4.9 (medium), 2026-09-01: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'product_order' parameter in all versions up to, and…
• CVE-2024-12712 - CVSS 5.3 (medium), 2025-01-08: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook…
• CVE-2024-7827 - CVSS 8.8 (high), 2024-08-20: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to boolean-based SQL Injection via the ‘model_number’ parameter in all versions up to,…
• CVE-2024-4213 - CVSS 5.3 (medium), 2024-05-14: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.4 via the…
• CVE-2024-3211 - CVSS 8.8 (high), 2024-04-12: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of the ec_addtocart shortcode in all…
• CVE-2023-3023 - CVSS 7.2 (high), 2023-07-12: The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to…
• CVE-2023-2895 - CVSS 4.3 (medium), 2023-06-09: The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect…
• CVE-2023-2894 - CVSS 4.3 (medium), 2023-06-09: The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect…
• CVE-2023-2893 - CVSS 4.3 (medium), 2023-06-09: The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect…
• CVE-2023-2896 - CVSS 4.3 (medium), 2023-06-09: The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect…
• CVE-2023-2892 - CVSS 6.5 (medium), 2023-06-09: The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect…
• CVE-2023-2891 - CVSS 6.5 (medium), 2023-06-09: The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect…