Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wordpress_simple_ecommerce_shopping_cart_plugin-_sell_products_through_paypal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWordpress Simple Ecommerce Shopping Cart Plugin Sell Products Through Paypal (e2b3ff31-63bc-59d1-aefd-7f89ef35929f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24620 vulnerable 2026-06-08 05:30:38.885288 Simple eCommerce <= 2.2.5 - Arbitrary File Upload
The WordPress Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin through 2.2.5 does not check for the uploaded Downloadable Digital product file, allowing any file, such as PHP to be uploaded by an administrator. Furthermore, as there is no CSRF in place, attackers could also make a logged admin upload a malicious PHP file, which would lead to RCE
Published: 2021-09-13T17:56:33.000Z
Updated: 2024-08-03T19:35:20.207Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.