Vulnerabilities

TI-2026-63337 CVE-2026-94124 · GHSA-mj9j-x9hf-48wm

WordPress WP EasyCart plugin <= 5.9.4 - SQL Injection vulnerability

LOW 36

Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00222 Published 2026-09-23 No fix listed CWE-89

TI-2026-41588 CVE-2026-57765 · GHSA-5rmv-7mhc-rw9q

WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability

LOW 37

Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-07-02 No fix listed CWE-89

TI-2026-24950 CVE-2026-32422 · GHSA-29xj-6jjp-m927

WordPress WP EasyCart plugin <= 5.8.13 - SQL Injection vulnerability

LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Blind SQL Injection.This issue affects WP EasyCart: from n/a throu…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-89

TI-2025-39145 CVE-2025-62997 · GHSA-vpv6-mfhw-5xw2

WordPress WP EasyCart plugin <= 5.8.11 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Retrieve Embedded Sensitive Data.This issue affects WP EasyCart: from n/a through <= 5.8.11.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-12-09 No fix listed CWE-201

TI-2014-04060 CVE-2014-4942 · GHSA-hrf8-94cp-x6x2

The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to…