CVE-2026-57765 WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability

HighCVSS 8.5 EPSS 0.36%

Description

Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.

Product	Affected versions	Fixed in
Levelfourdevelopment WP EasyCart	<= 5.9.0	No fix listed
wordpress wp-easycart(WordPress)	< 5.9.2	5.9.2

8.5 High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

All scores (3)

EPSS (exploitation probability, 30 days): 0.36% (percentile 30.0)
CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.