Read the docs
TI-2015-02358 Aliases CVE-2015-2673GHSA-6x9p-fwgv-g747

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in…

Priority MEDIUM 56CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.

Why it matters now

EPSS 0.18932 97th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 105

CPEVersionsRoleVendor
cpe:2.3:a:wpeasycart:wp_easycart:1.1.30:*:*:*:*:wordpress:*:*1.1.30Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.1.31:*:*:*:*:wordpress:*:*1.1.31Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.1.32:*:*:*:*:wordpress:*:*1.1.32Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.1.33:*:*:*:*:wordpress:*:*1.1.33Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.1.34:*:*:*:*:wordpress:*:*1.1.34Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.1.35:*:*:*:*:wordpress:*:*1.1.35Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.1.36:*:*:*:*:wordpress:*:*1.1.36Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.0:*:*:*:*:wordpress:*:*1.2.0Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.1:*:*:*:*:wordpress:*:*1.2.1Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.2:*:*:*:*:wordpress:*:*1.2.2Vulnerablelevelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.30:*:*:*:*:wordpress:*:* Versions 1.1.30 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.31:*:*:*:*:wordpress:*:* Versions 1.1.31 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.32:*:*:*:*:wordpress:*:* Versions 1.1.32 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.33:*:*:*:*:wordpress:*:* Versions 1.1.33 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.34:*:*:*:*:wordpress:*:* Versions 1.1.34 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.35:*:*:*:*:wordpress:*:* Versions 1.1.35 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.1.36:*:*:*:*:wordpress:*:* Versions 1.1.36 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.0:*:*:*:*:wordpress:*:* Versions 1.2.0 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.1:*:*:*:*:wordpress:*:* Versions 1.2.1 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.2:*:*:*:*:wordpress:*:* Versions 1.2.2 Vulnerable ·levelfourstorefront
Show 95 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:wpeasycart:wp_easycart:1.2.3:*:*:*:*:wordpress:*:*1.2.3Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.4:*:*:*:*:wordpress:*:*1.2.4Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.5:*:*:*:*:wordpress:*:*1.2.5Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.6:*:*:*:*:wordpress:*:*1.2.6Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.7:*:*:*:*:wordpress:*:*1.2.7Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.8:*:*:*:*:wordpress:*:*1.2.8Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.9:*:*:*:*:wordpress:*:*1.2.9Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.10:*:*:*:*:wordpress:*:*1.2.10Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.11:*:*:*:*:wordpress:*:*1.2.11Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.12:*:*:*:*:wordpress:*:*1.2.12Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.13:*:*:*:*:wordpress:*:*1.2.13Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.14:*:*:*:*:wordpress:*:*1.2.14Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.15:*:*:*:*:wordpress:*:*1.2.15Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:1.2.16:*:*:*:*:wordpress:*:*1.2.16Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.1:*:*:*:*:wordpress:*:*2.0.1Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.1\@824267:*:*:*:*:wordpress:*:*2.0.1@824267Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.2:*:*:*:*:wordpress:*:*2.0.2Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.3:*:*:*:*:wordpress:*:*2.0.3Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.4:*:*:*:*:wordpress:*:*2.0.4Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.5:*:*:*:*:wordpress:*:*2.0.5Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.6:*:*:*:*:wordpress:*:*2.0.6Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.7:*:*:*:*:wordpress:*:*2.0.7Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.8:*:*:*:*:wordpress:*:*2.0.8Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.9:*:*:*:*:wordpress:*:*2.0.9Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.10:*:*:*:*:wordpress:*:*2.0.10Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.11:*:*:*:*:wordpress:*:*2.0.11Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.12:*:*:*:*:wordpress:*:*2.0.12Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.13:*:*:*:*:wordpress:*:*2.0.13Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.14:*:*:*:*:wordpress:*:*2.0.14Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.15:*:*:*:*:wordpress:*:*2.0.15Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.16:*:*:*:*:wordpress:*:*2.0.16Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.17:*:*:*:*:wordpress:*:*2.0.17Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.18:*:*:*:*:wordpress:*:*2.0.18Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.19:*:*:*:*:wordpress:*:*2.0.19Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.20:*:*:*:*:wordpress:*:*2.0.20Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.21:*:*:*:*:wordpress:*:*2.0.21Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.0.22:*:*:*:*:wordpress:*:*2.0.22Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.0:*:*:*:*:wordpress:*:*2.1.0Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.1:*:*:*:*:wordpress:*:*2.1.1Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.2:*:*:*:*:wordpress:*:*2.1.2Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.3:*:*:*:*:wordpress:*:*2.1.3Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.4:*:*:*:*:wordpress:*:*2.1.4Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.5:*:*:*:*:wordpress:*:*2.1.5Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.6:*:*:*:*:wordpress:*:*2.1.6Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.7:*:*:*:*:wordpress:*:*2.1.7Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.8:*:*:*:*:wordpress:*:*2.1.8Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.9:*:*:*:*:wordpress:*:*2.1.9Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.10:*:*:*:*:wordpress:*:*2.1.10Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.11:*:*:*:*:wordpress:*:*2.1.11Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.12:*:*:*:*:wordpress:*:*2.1.12Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.13:*:*:*:*:wordpress:*:*2.1.13Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.14:*:*:*:*:wordpress:*:*2.1.14Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.15:*:*:*:*:wordpress:*:*2.1.15Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.16:*:*:*:*:wordpress:*:*2.1.16Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.17:*:*:*:*:wordpress:*:*2.1.17Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.18:*:*:*:*:wordpress:*:*2.1.18Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.19:*:*:*:*:wordpress:*:*2.1.19Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.20:*:*:*:*:wordpress:*:*2.1.20Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.21:*:*:*:*:wordpress:*:*2.1.21Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.22:*:*:*:*:wordpress:*:*2.1.22Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.23:*:*:*:*:wordpress:*:*2.1.23Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.24:*:*:*:*:wordpress:*:*2.1.24Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.25:*:*:*:*:wordpress:*:*2.1.25Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.26:*:*:*:*:wordpress:*:*2.1.26Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.27:*:*:*:*:wordpress:*:*2.1.27Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.28:*:*:*:*:wordpress:*:*2.1.28Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.29:*:*:*:*:wordpress:*:*2.1.29Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.30:*:*:*:*:wordpress:*:*2.1.30Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.31:*:*:*:*:wordpress:*:*2.1.31Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.32:*:*:*:*:wordpress:*:*2.1.32Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.33:*:*:*:*:wordpress:*:*2.1.33Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.34:*:*:*:*:wordpress:*:*2.1.34Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.35:*:*:*:*:wordpress:*:*2.1.35Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:2.1.36:*:*:*:*:wordpress:*:*2.1.36Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.0:*:*:*:*:wordpress:*:*3.0.0Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.1:*:*:*:*:wordpress:*:*3.0.1Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.2:*:*:*:*:wordpress:*:*3.0.2Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.3:*:*:*:*:wordpress:*:*3.0.3Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.4:*:*:*:*:wordpress:*:*3.0.4Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.5:*:*:*:*:wordpress:*:*3.0.5Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.6:*:*:*:*:wordpress:*:*3.0.6Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.7:*:*:*:*:wordpress:*:*3.0.7Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.8:*:*:*:*:wordpress:*:*3.0.8Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.9:*:*:*:*:wordpress:*:*3.0.9Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.10:*:*:*:*:wordpress:*:*3.0.10Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.11:*:*:*:*:wordpress:*:*3.0.11Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.12:*:*:*:*:wordpress:*:*3.0.12Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.13:*:*:*:*:wordpress:*:*3.0.13Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.14:*:*:*:*:wordpress:*:*3.0.14Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.15:*:*:*:*:wordpress:*:*3.0.15Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.16:*:*:*:*:wordpress:*:*3.0.16Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.17:*:*:*:*:wordpress:*:*3.0.17Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.18:*:*:*:*:wordpress:*:*3.0.18Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.19:*:*:*:*:wordpress:*:*3.0.19Vulnerablelevelfourstorefront
cpe:2.3:a:wpeasycart:wp_easycart:3.0.20:*:*:*:*:wordpress:*:*3.0.20Vulnerablelevelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.3:*:*:*:*:wordpress:*:* Versions 1.2.3 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.4:*:*:*:*:wordpress:*:* Versions 1.2.4 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.5:*:*:*:*:wordpress:*:* Versions 1.2.5 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.6:*:*:*:*:wordpress:*:* Versions 1.2.6 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.7:*:*:*:*:wordpress:*:* Versions 1.2.7 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.8:*:*:*:*:wordpress:*:* Versions 1.2.8 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.9:*:*:*:*:wordpress:*:* Versions 1.2.9 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.10:*:*:*:*:wordpress:*:* Versions 1.2.10 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.11:*:*:*:*:wordpress:*:* Versions 1.2.11 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.12:*:*:*:*:wordpress:*:* Versions 1.2.12 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.13:*:*:*:*:wordpress:*:* Versions 1.2.13 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.14:*:*:*:*:wordpress:*:* Versions 1.2.14 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.15:*:*:*:*:wordpress:*:* Versions 1.2.15 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:1.2.16:*:*:*:*:wordpress:*:* Versions 1.2.16 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.1:*:*:*:*:wordpress:*:* Versions 2.0.1 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.1\@824267:*:*:*:*:wordpress:*:* Versions 2.0.1@824267 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.2:*:*:*:*:wordpress:*:* Versions 2.0.2 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.3:*:*:*:*:wordpress:*:* Versions 2.0.3 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.4:*:*:*:*:wordpress:*:* Versions 2.0.4 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.5:*:*:*:*:wordpress:*:* Versions 2.0.5 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.6:*:*:*:*:wordpress:*:* Versions 2.0.6 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.7:*:*:*:*:wordpress:*:* Versions 2.0.7 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.8:*:*:*:*:wordpress:*:* Versions 2.0.8 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.9:*:*:*:*:wordpress:*:* Versions 2.0.9 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.10:*:*:*:*:wordpress:*:* Versions 2.0.10 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.11:*:*:*:*:wordpress:*:* Versions 2.0.11 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.12:*:*:*:*:wordpress:*:* Versions 2.0.12 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.13:*:*:*:*:wordpress:*:* Versions 2.0.13 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.14:*:*:*:*:wordpress:*:* Versions 2.0.14 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.15:*:*:*:*:wordpress:*:* Versions 2.0.15 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.16:*:*:*:*:wordpress:*:* Versions 2.0.16 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.17:*:*:*:*:wordpress:*:* Versions 2.0.17 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.18:*:*:*:*:wordpress:*:* Versions 2.0.18 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.19:*:*:*:*:wordpress:*:* Versions 2.0.19 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.20:*:*:*:*:wordpress:*:* Versions 2.0.20 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.21:*:*:*:*:wordpress:*:* Versions 2.0.21 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.0.22:*:*:*:*:wordpress:*:* Versions 2.0.22 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.0:*:*:*:*:wordpress:*:* Versions 2.1.0 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.1:*:*:*:*:wordpress:*:* Versions 2.1.1 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.2:*:*:*:*:wordpress:*:* Versions 2.1.2 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.3:*:*:*:*:wordpress:*:* Versions 2.1.3 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.4:*:*:*:*:wordpress:*:* Versions 2.1.4 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.5:*:*:*:*:wordpress:*:* Versions 2.1.5 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.6:*:*:*:*:wordpress:*:* Versions 2.1.6 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.7:*:*:*:*:wordpress:*:* Versions 2.1.7 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.8:*:*:*:*:wordpress:*:* Versions 2.1.8 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.9:*:*:*:*:wordpress:*:* Versions 2.1.9 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.10:*:*:*:*:wordpress:*:* Versions 2.1.10 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.11:*:*:*:*:wordpress:*:* Versions 2.1.11 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.12:*:*:*:*:wordpress:*:* Versions 2.1.12 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.13:*:*:*:*:wordpress:*:* Versions 2.1.13 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.14:*:*:*:*:wordpress:*:* Versions 2.1.14 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.15:*:*:*:*:wordpress:*:* Versions 2.1.15 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.16:*:*:*:*:wordpress:*:* Versions 2.1.16 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.17:*:*:*:*:wordpress:*:* Versions 2.1.17 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.18:*:*:*:*:wordpress:*:* Versions 2.1.18 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.19:*:*:*:*:wordpress:*:* Versions 2.1.19 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.20:*:*:*:*:wordpress:*:* Versions 2.1.20 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.21:*:*:*:*:wordpress:*:* Versions 2.1.21 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.22:*:*:*:*:wordpress:*:* Versions 2.1.22 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.23:*:*:*:*:wordpress:*:* Versions 2.1.23 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.24:*:*:*:*:wordpress:*:* Versions 2.1.24 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.25:*:*:*:*:wordpress:*:* Versions 2.1.25 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.26:*:*:*:*:wordpress:*:* Versions 2.1.26 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.27:*:*:*:*:wordpress:*:* Versions 2.1.27 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.28:*:*:*:*:wordpress:*:* Versions 2.1.28 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.29:*:*:*:*:wordpress:*:* Versions 2.1.29 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.30:*:*:*:*:wordpress:*:* Versions 2.1.30 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.31:*:*:*:*:wordpress:*:* Versions 2.1.31 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.32:*:*:*:*:wordpress:*:* Versions 2.1.32 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.33:*:*:*:*:wordpress:*:* Versions 2.1.33 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.34:*:*:*:*:wordpress:*:* Versions 2.1.34 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.35:*:*:*:*:wordpress:*:* Versions 2.1.35 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:2.1.36:*:*:*:*:wordpress:*:* Versions 2.1.36 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.0:*:*:*:*:wordpress:*:* Versions 3.0.0 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.1:*:*:*:*:wordpress:*:* Versions 3.0.1 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.2:*:*:*:*:wordpress:*:* Versions 3.0.2 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.3:*:*:*:*:wordpress:*:* Versions 3.0.3 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.4:*:*:*:*:wordpress:*:* Versions 3.0.4 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.5:*:*:*:*:wordpress:*:* Versions 3.0.5 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.6:*:*:*:*:wordpress:*:* Versions 3.0.6 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.7:*:*:*:*:wordpress:*:* Versions 3.0.7 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.8:*:*:*:*:wordpress:*:* Versions 3.0.8 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.9:*:*:*:*:wordpress:*:* Versions 3.0.9 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.10:*:*:*:*:wordpress:*:* Versions 3.0.10 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.11:*:*:*:*:wordpress:*:* Versions 3.0.11 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.12:*:*:*:*:wordpress:*:* Versions 3.0.12 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.13:*:*:*:*:wordpress:*:* Versions 3.0.13 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.14:*:*:*:*:wordpress:*:* Versions 3.0.14 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.15:*:*:*:*:wordpress:*:* Versions 3.0.15 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.16:*:*:*:*:wordpress:*:* Versions 3.0.16 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.17:*:*:*:*:wordpress:*:* Versions 3.0.17 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.18:*:*:*:*:wordpress:*:* Versions 3.0.18 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.19:*:*:*:*:wordpress:*:* Versions 3.0.19 Vulnerable ·levelfourstorefront
  • cpe:2.3:a:wpeasycart:wp_easycart:3.0.20:*:*:*:*:wordpress:*:* Versions 3.0.20 Vulnerable ·levelfourstorefront

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-2673
  2. 2026-10-03 Alias added: GHSA-6x9p-fwgv-g747

References

Exploit 1

  • TI-2023-01063 Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI CVSS 3.1HIGH 7.2
  • TI-2014-07551 Unrestricted file upload vulnerability in… CVSS 2.0MEDIUM 6.5
  • TI-2023-02831 WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby' CVSS 3.1HIGH 7.2
  • TI-2023-02710 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product CVSS 3.1MEDIUM 6.5
  • TI-2023-02709 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_product CVSS 3.1MEDIUM 6.5
  • TI-2023-02714 WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_product CVSS 3.1MEDIUM 4.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences