Read the docs

levelfourstorefront

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

levelfourstorefront records in CISA KEV

No levelfourstorefront vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Easycart 10 records HIGH Shopping Cart & Ecommerce Store 1 record MEDIUM

Records

1 record in Shopping Cart & Ecommerce Store · all components

TI-2021-13659 CVE-2021-34645 · GHSA-jv95-4ggp-rvrw

Shopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting

Priority MEDIUM 41

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows atta…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00638 Published 2021-08-19 No fix listed CWE-352
Open these records in search →