Ecwid by Lightspeed Ecommerce Shopping Cart — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Ecwid by Lightspeed Ecommerce Shopping Cart, with AI-generated Chinese analysis, references, and POCs.

Vendor: ecwid

CVE ID	Title	CVSS	Severity	Published
CVE-2026-14332	Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action	5.4	Medium	2026-08-13
CVE-2026-1750	Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access CWE-269	8.8	High	2026-02-15
CVE-2024-13795	Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message CWE-352	4.3	Medium	2025-02-18
CVE-2024-2456	Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79	6.4	Medium	2024-04-09

All 4 known CVE vulnerabilities affecting Ecwid by Lightspeed Ecommerce Shopping Cart with full Chinese analysis, references, and POCs where available.