Wordpress Simple Shopping Cart
Approved changes feed: RSS · Atom
cpe:2.3:a:mra13:wordpress_simple_shopping_cart:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mra13 (fb07f8cb-eecb-5698-b4d4-35f7e4581496) |
|---|---|
| Product | Wordpress Simple Shopping Cart (f2456496-968b-5280-88f2-589ed64c8b31) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3874 |
vulnerable | 2026-06-08 07:23:10.056752 |
WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference
MEDIUM (6.5)
The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 due to lack of randomization of a user controlled key. This makes it possible for unauthenticated attackers to access customer shopping carts and edit product links, add or delete products, and discover coupon codes.
Published: 2025-05-01T11:11:41.924Z
Updated: 2026-04-08T16:52:11.176Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.