Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Simple Shopping Cart — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Simple Shopping Cart, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for Simple Shopping Cart, a web-based e-commerce application with no documented vendor or active maintenance. The collection covers historical security flaws, including authentication bypass, session fixation, and injection risks. It spans advisories released from 2018 through the current date, capturing both critical and moderate severity issues. Use this resource to track the product’s advisory history, analyze recurring weakness patterns, and review how previously identified defects were patched over time. The dataset excludes unresolved items without public mitigation data.

Vendor: mra13

CVE ID Title CVSS Severity Published
CVE-2026-48868 WordPress Simple Shopping Cart plugin <= 5.2.9 - Insecure Direct Object References (IDOR) vulnerability CWE-639 7.5 High 2026-06-15
CVE-2026-0552 Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode CWE-79 6.4 Medium 2026-04-04
CVE-2025-14248 code-projects Simple Shopping Cart adminlogin.php sql injection CWE-89 7.3 High 2025-12-08
CVE-2025-14247 code-projects Simple Shopping Cart additems.php sql injection CWE-89 6.3 Medium 2025-12-08
CVE-2025-14246 code-projects Simple Shopping Cart settings.php sql injection CWE-89 6.3 Medium 2025-12-08
CVE-2025-7609 code-projects Simple Shopping Cart register.php sql injection CWE-89 7.3 High 2025-07-14
CVE-2025-7608 code-projects Simple Shopping Cart userlogin.php sql injection CWE-89 7.3 High 2025-07-14
CVE-2025-7607 code-projects Simple Shopping Cart save_order.php sql injection CWE-89 7.3 High 2025-07-14
CVE-2025-3889 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' CWE-639 5.3 Medium 2025-05-01
CVE-2025-3874 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference CWE-639 6.5 Medium 2025-05-01
CVE-2025-3890 WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2025-05-01
CVE-2025-3530 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation CWE-472 7.5 High 2025-04-23
CVE-2025-3529 WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter CWE-201 8.2 High 2025-04-23
CVE-2024-12622 WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-12-24
CVE-2023-6497 WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium 2024-01-27

All 15 known CVE vulnerabilities affecting Simple Shopping Cart with full Chinese analysis, references, and POCs where available.