Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Simple Shopping Cart 5.3.3 Clear all filters
TI-2026-78593 CVE-2026-104642 · GHSA-3m32-jjhw-mfwj

Price verification bypass in Simple Shopping Cart WordPress plugin

Priority LOW 13

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00136 Published 2026-10-21 Fixed in 5.3.3 CWE-345
TI-2026-78592 CVE-2026-104641 · GHSA-g546-6f38-794c

Payment bypass in Simple Shopping Cart WordPress plugin

Priority LOW 29

The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the site owner's PayPal account in its default configuration, allowing unauthenticate…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00145 Published 2026-10-21 Fixed in 5.3.3 CWE-345