CVE-2023-1124
published 2023-04-03CVE-2023-1124: The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to…
PriorityP336high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.08%
61.0th percentile
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux_kernel | >= 5.18.0 < 6.1.47 | 6.1.47 |
| linux | linux_kernel | >= 6.2.0 < 6.4.12 | 6.4.12 |
| wpeasycart | wp_easycart | < 5.4.3 | 5.4.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
drm/stm: ltdc: fix late dereference check
osv·2025-10-22
CVE-2023-53714 drm/stm: ltdc: fix late dereference check
drm/stm: ltdc: fix late dereference check
In the Linux kernel, the following vulnerability has been resolved:
drm/stm: ltdc: fix late dereference check
In ltdc_crtc_set_crc_source(), struct drm_crtc was dereferenced in a
container_of() before the pointer check. This could cause a kernel panic.
Fix this smatch warning:
drivers/gpu/drm/stm/ltdc.c:1124 ltdc_crtc_set_crc_source() warn: variable dereferenced before check 'crtc' (see line 1119)
GHSA
GHSA-q37p-4rw5-7329: The Shopping Cart & eCommerce Store WordPress plugin before 5
ghsa_unreviewed·2023-04-03
CVE-2023-1124 [HIGH] CWE-22 GHSA-q37p-4rw5-7329: The Shopping Cart & eCommerce Store WordPress plugin before 5
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.
Red Hat
kernel: drm/stm: ltdc: fix late dereference check
vendor_redhat·2025-10-22
CVE-2023-53714 kernel: drm/stm: ltdc: fix late dereference check
kernel: drm/stm: ltdc: fix late dereference check
In the Linux kernel, the following vulnerability has been resolved:
drm/stm: ltdc: fix late dereference check
In ltdc_crtc_set_crc_source(), struct drm_crtc was dereferenced in a
container_of() before the pointer check. This could cause a kernel panic.
Fix this smatch warning:
drivers/gpu/drm/stm/ltdc.c:1124 ltdc_crtc_set_crc_source() warn: variable dereferenced before check 'crtc' (see line 1119)
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise
No detection rules found.
No public exploits indexed.
2023-04-03
Published