Advisories · Technology
levelfourstorefront Shopping Cart & eCommerce Store.
Every CVE that names levelfourstorefront Shopping Cart & eCommerce Store among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action
- levelfourstorefront Shopping Cart & eCommerce Store
- Privilege escalation
- CVSS 4.9 Medium
Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter
- levelfourstorefront Shopping Cart & eCommerce Store
- SQL injection
- CVSS 5.3 Medium
Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates
- levelfourstorefront Shopping Cart & eCommerce Store
- Broken access control
- CVSS 8.8 High
Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter
- levelfourstorefront Shopping Cart & eCommerce Store
- SQL injection
- CVSS 5.3 Medium
Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure
- levelfourstorefront Shopping Cart & eCommerce Store
- Information disclosure
- CVSS 8.8 High
Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection
- levelfourstorefront Shopping Cart & eCommerce Store
- SQL injection
- CVSS 7.2 High
WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
- levelfourstorefront Shopping Cart & eCommerce Store
- SQL injection
- CVSS 6.5 Medium
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product
- levelfourstorefront Shopping Cart & eCommerce Store
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product
- levelfourstorefront Shopping Cart & eCommerce Store
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product
- levelfourstorefront Shopping Cart & eCommerce Store
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product
- levelfourstorefront Shopping Cart & eCommerce Store
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_product
- levelfourstorefront Shopping Cart & eCommerce Store
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product
- levelfourstorefront Shopping Cart & eCommerce Store
- Cross-site request forgery (CSRF)