cbcvebase.

Ecwid Ecommerce Shopping Cart vulnerabilities

1 known vulnerability affecting ecwid/ecwid_ecommerce_shopping_cart.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2022-2432P4MEDIUMCVSS 4.3≥ 6.10.23, ≤ 6.10.232022-09-06
CVE-2022-2432 [MEDIUM] CWE-352 CVE-2022-2432: The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery i The Ecwid Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.10.23. This is due to missing or incorrect nonce validation on the ecwid_update_plugin_params function. This makes it possible for unauthenticated attackers to update plugin options granted they can trick a site admini
nvd
Ecwid Ecommerce Shopping Cart vulnerabilities | cvebase