TI-2026-41588 CVE-2026-57765 · GHSA-5rmv-7mhc-rw9q
WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability
Priority LOW 37
Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.
levelfourdevelopment
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
levelfourdevelopment records in CISA KEVNo levelfourdevelopment vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-63337 CVE-2026-94124 · GHSA-mj9j-x9hf-48wm
WordPress WP EasyCart plugin <= 5.9.4 - SQL Injection vulnerability
Priority LOW 36
Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.
TI-2026-24950 CVE-2026-32422 · GHSA-29xj-6jjp-m927
WordPress WP EasyCart plugin <= 5.8.13 - SQL Injection vulnerability
Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Blind SQL Injection.This issue affects WP EasyCart: from n/a throu…
TI-2025-39145 CVE-2025-62997 · GHSA-vpv6-mfhw-5xw2
WordPress WP EasyCart plugin <= 5.8.11 - Sensitive Data Exposure vulnerability
Priority LOW 30
Insertion of Sensitive Information Into Sent Data vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Retrieve Embedded Sensitive Data.This issue affects WP EasyCart: from n/a through <= 5.8.11.
TI-2014-04060 CVE-2014-4942 · GHSA-hrf8-94cp-x6x2
The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to…
Priority LOW 30
The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.