Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: nshowketgmailcom Clear all filters
TI-2024-11249 CVE-2024-12128 · GHSA-wgw8-jfg7-7q45

Cross-site scripting in nshowketgmailcom Simple Ecommerce Shopping Cart Plugin- Sell…

Priority LOW 27

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘monthly_sales_current_year’ parameter in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00299 Published 2024-12-07 No fix listed CWE-79
TI-2024-11364 CVE-2024-12253 · GHSA-g7pv-5fjq-q2xw

Missing authorization in nshowketgmailcom Simple Ecommerce Shopping Cart Plugin- Sell…

Priority LOW 24

The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'save_settings', 'export_csv', and 'simpleecommca…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00262 Published 2024-12-07 No fix listed CWE-862