ecwid

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ecwid records in CISA KEV

No ecwid vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-01433 CVE-2026-1750 · GHSA-wp7f-392c-hj4c

Improper privilege management in Ecwid by Lightspeed Ecommerce Shopping Cart

MEDIUM 40

The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.0.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00309 Published 2026-02-15 No fix listed CWE-269

TI-2024-02282 CVE-2024-2456 · GHSA-c3j2-cg9f-6vvm

Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 6.12.10 due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00353 Published 2024-04-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0