Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown
CVE-2024-22551
Disclosure Date: January 26, 2024 (last updated February 02, 2024)
WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /site/default/search.
0
Attacker Value
Unknown
CVE-2021-24867
Disclosure Date: February 21, 2022 (last updated February 23, 2025)
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
0
Attacker Value
Unknown
CVE-2018-19138
Disclosure Date: November 09, 2018 (last updated November 27, 2024)
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.
0
Attacker Value
Unknown
CVE-2015-2673
Disclosure Date: October 06, 2017 (last updated November 26, 2024)
The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.
0
Attacker Value
Unknown
CVE-2013-7317
Disclosure Date: January 24, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) settings_file or (2) data_file parameter to (a) ampie.swf, (b) amline.swf, or (c) amcolumn.swf.
0
Attacker Value
Unknown
CVE-2012-3576
Disclosure Date: June 16, 2012 (last updated October 04, 2023)
Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/wpstorecart.
0
Attacker Value
Unknown
CVE-2011-4460
Disclosure Date: June 04, 2012 (last updated October 04, 2023)
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
0
Attacker Value
Unknown
CVE-2011-2085
Disclosure Date: June 04, 2012 (last updated October 04, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users.
0
Attacker Value
Unknown
CVE-2011-1686
Disclosure Date: April 22, 2011 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.
0
Attacker Value
Unknown
CVE-2011-1689
Disclosure Date: April 22, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
