Levelfourdevelopment wp-easycart vulnerabilities

Latest Levelfourdevelopment wp-easycart CVEs

Newest publication first

1. CVE-2014-4942 EasyCart <= 2.0.5 - Sensitive Information Disclosure

   Published 2014-07-11

   Medium·CVSS 5.0 EPSS 4.5%

   The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.