Ecwid Ecommerce Shopping Cart

Güvenlik açıkları

• CVE-2026-1750

  Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access

  Yüksek 8.8

• CVE-2023-24377

  WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2025-32195

  WordPress Ecwid Shopping Cart plugin <= 7.0 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2024-2456

  Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

  Orta 6.4

• CVE-2023-51533

  WordPress Ecwid Shopping Cart Plugin <= 6.12.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Orta 6.1

• CVE-2023-24408

  WordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2026-24613

  WordPress Ecwid Shopping Cart plugin <= 7.0.6 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-24580

  WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2024-13795

  Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message

  Orta 4.3

• CVE-2022-2432

  Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update

  Orta 4.3