getshopped vulnerabilities

Products

• wp e-commerce 2

Latest getshopped CVEs

Newest publication first

1. CVE-2012-5310 WP eCommerce < 3.8.7.6 - SQL Injection

   Published 2012-10-08

   High·CVSS 7.5 EPSS 2.1%

   SQL injection vulnerability in the WP e-Commerce plugin before 3.8.7.6 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

2. CVE-2011-5104 WP eCommerce < 3.8.7.2 - Stored Cross-Site Scripting

   Published 2012-08-23

   Medium·CVSS 4.3 EPSS 2.2%

   Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.