levelfourstorefront vulnerabilities

CVEs per yearBy the year they were published

1. 20237
2. 20243
3. 20251
4. 20262

Newest CVEs

• CVE-2026-17553

  Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action

  levelfourstorefront · Shopping Cart & eCommerce Store

  High7.2
• CVE-2026-17589

  Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter

  levelfourstorefront · Shopping Cart & eCommerce Store

  Medium4.9
• CVE-2024-12712

  Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates

  levelfourstorefront · Shopping Cart & eCommerce Store

  Medium5.3
• CVE-2024-7827

  Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter

  levelfourstorefront · Shopping Cart & eCommerce Store

  High8.8
• CVE-2024-4213

  Shopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information Exposure

  levelfourstorefront · Shopping Cart & eCommerce Store

  Medium5.3
• CVE-2024-3211

  Shopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL Injection

  levelfourstorefront · Shopping Cart & eCommerce Store

  High8.8
• CVE-2023-3023

  WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'

  levelfourstorefront · Shopping Cart & eCommerce Store

  High7.2
• CVE-2023-2892

  WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_product

  levelfourstorefront · Shopping Cart & eCommerce Store

  Medium6.5
• CVE-2023-2894

  WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_product

  levelfourstorefront · Shopping Cart & eCommerce Store

  Medium4.3
• CVE-2023-2893

  WP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_product

  levelfourstorefront · Shopping Cart & eCommerce Store

  Medium4.3