Ecwid Ecommerce Shopping Cart
Approved changes feed: RSS · Atom
cpe:2.3:a:lightspeedhq:ecwid_ecommerce_shopping_cart:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Lightspeedhq (bf033376-bf0e-5cf5-85ef-005f5c216da6) |
|---|---|
| Product | Ecwid Ecommerce Shopping Cart (b92bfcbf-bb2b-5965-b92c-d4fab02ef768) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/ecwid-shopping-cart |
purl2cpe | 2026-06-01 10:14:51.087542 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-13795 |
vulnerable | 2026-06-08 06:25:38.515180 |
Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message
MEDIUM (4.3)
The Ecwid by Lightspeed Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.12.27. This is due to missing or incorrect nonce validation on the ecwid_deactivate_feedback() function. This makes it possible for unauthenticated attackers to send deactivation messages on behalf of a site owner via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2025-02-18T07:28:14.388Z
Updated: 2026-04-08T17:32:32.848Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6292 |
vulnerable | 2026-06-08 06:19:46.874690 |
Ecwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF
The Ecwid Ecommerce Shopping Cart WordPress plugin before 6.12.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
Published: 2024-01-16T15:57:34.872Z
Updated: 2025-06-02T15:09:04.835Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51533 |
vulnerable | 2026-06-08 06:17:53.436357 |
WordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart.This issue affects Ecwid Ecommerce Shopping Cart: from n/a through 6.12.4.
Published: 2024-02-28T18:38:06.169Z
Updated: 2026-04-28T16:09:03.876Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24408 |
vulnerable | 2026-06-08 05:56:05.405756 |
WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.4 versions.
Published: 2023-05-08T14:36:18.332Z
Updated: 2026-04-28T16:08:05.981Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24377 |
vulnerable | 2026-06-08 05:56:05.347182 |
WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versions.
Published: 2023-02-14T11:18:14.424Z
Updated: 2026-04-28T16:08:05.327Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2432 |
vulnerable | 2026-06-08 05:43:35.535394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.