Vulnerabilities

TI-2026-03535 CVE-2026-4080 · GHSA-q97r-wcrr-7v9h

Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

LOW 28

The Easy Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_to_cart' shortcode in all versions up to and including 1.8.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00243 Published 2026-06-02 No fix listed CWE-79

TI-2024-36422 CVE-2024-54334 · GHSA-fx7w-r2qg-gq45

WordPress Quran Phrases About Most People Shortcodes plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zeshanb Quran Phrases About Most People Shortcodes quran-phrases-about-most-people-shortcodes allows DOM-Based XSS.Thi…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00331 Published 2024-12-13 No fix listed CWE-79

Vulnerabilities

Filters

Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

WordPress Quran Phrases About Most People Shortcodes plugin <= 1.4 - Cross Site Scripting (XSS) vulnerability