Advisories · Technology

Simple Shopping Cart.

Every CVE that names Simple Shopping Cart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104642 CVE record

CVSS 2.7 Low

Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass
- Simple Shopping Cart
- CWE-345
Not analysed yet 21 Oct 2026
CVE-2026-104641 CVE record

CVSS 5.3 Medium

Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient
- Simple Shopping Cart
- CWE-345
Not analysed yet 21 Oct 2026
CVE-2026-104119 CVE record

CVSS 3.5 Low

Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials
- Simple Shopping Cart
- Cross-site scripting (XSS)
Not analysed yet 4 Oct 2026