PatchTheCVEwp-ecommerce vulnerabilities
Recent CVEs affecting wp-ecommerce products. 3 tracked.
wp-ecommerce has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-06-13. Highest priority: CVE-2024-1514 (score 53/100).
- CVE-2024-3073 LOW 2.7 UPGRADE The Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin plugin for WordPress is vulnerable to info
- CVE-2024-35676 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in w
- CVE-2024-1514 CRITICAL 9.8 UPGRADE The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents'
FAQ
How do I fix wp-ecommerce vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp-ecommerce being exploited right now?
None of the tracked wp-ecommerce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp-ecommerce CVE should I patch first?
CVE-2024-1514 currently ranks highest (53/100): The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' .