Veille CVE

Recherche « Unknown Simple Shopping Cart »

8 CVE

Critique 0 Élevée 5 Moyenne 1 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Simple Shopping Cart » ✕
  1. CVE-2026-104642 2.7 Faible

    Unknown Simple Shopping Cart

    The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor role and above to register attacker-chosen prices for existing products, which any visitor can then use to add those products to the cart at that price.

  2. CVE-2026-104641 5.3 Moyenne

    Unknown Simple Shopping Cart

    The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the site owner's PayPal account in its default configuration, allowing unauthenticated attackers to have their orders marked as paid using a payment made to an account they control.

  3. CVE-2026-104119 3.5 Faible

    Unknown Simple Shopping Cart

    The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks, which is notably impactful on multisite installations where administrators do not have the unfiltered_html capability.

  4. CVE-2026-15703 7.3 Élevée

    SourceCodester Simple and Nice Shopping Cart Script

    A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

  5. CVE-2026-15190 7.3 Élevée

    SourceCodester Simple and Nice Shopping Cart Script

    A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

  6. CVE-2026-14654 7.3 Élevée

    SourceCodester Simple and Nice Shopping Cart Script

    A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument user_id leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

  7. CVE-2026-14653 7.3 Élevée

    SourceCodester Simple and Nice Shopping Cart Script

    A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument user_id causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

  8. CVE-2026-14652 7.3 Élevée

    SourceCodester Simple and Nice Shopping Cart Script

    A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.