Read the docs

Ecwid by Lightspeed Ecommerce Shopping Cart

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ecwid by Lightspeed Ecommerce Shopping Cart records in CISA KEV

No Ecwid by Lightspeed Ecommerce Shopping Cart vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-19852 CVE-2026-24613 · GHSA-cgc2-28w6-wq4g

WordPress Ecwid Shopping Cart plugin <= 7.0.6 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00267 Published 2026-01-23 No fix listed CWE-862
TI-2025-23293 CVE-2025-32195 · GHSA-pp95-cm7q-h6wx

WordPress Ecwid Shopping Cart plugin <= 7.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Stored XSS.This issue affec…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79
TI-2026-19820 CVE-2026-24580 · GHSA-w9ff-c85p-gqxj

WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-23 No fix listed CWE-862
Open these records in search →