Read the docs

WPecommerce, Alexanderfoxc

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

WPecommerce, Alexanderfoxc records in CISA KEV

No WPecommerce, Alexanderfoxc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy Wp Smtp 8 records HIGH Recurring Paypal Donations 1 record LOW Wp Ecommerce 1 record MEDIUM

Records

1 record in Wp Ecommerce · all components

TI-2024-01414 CVE-2024-1514 · GHSA-vq79-hxjc-77c4

WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection

Priority MEDIUM 43

The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter in all versions up to, and including, 3.15.1 due to insufficient escaping on the user supplied param…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00718 Published 2024-02-28 No fix listed CWE-89
Open these records in search →