What’s Vulnerable › Products

mra13 Simple Shopping Cart vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your mra13 Simple Shopping Cart version is affected

Latest mra13 Simple Shopping Cart vulnerabilities

• CVE-2026-0552 — Simple Shopping Cart <= 5.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsc_display_product' Shortcode (CVSS 6.4)
• CVE-2025-3890 — WordPress Simple PayPal Shopping Cart <= 5.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2025-3889 — WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference via 'quantity' (CVSS 5.3)
• CVE-2025-3874 — WordPress Simple PayPal Shopping Cart <= 5.1.3 - Insecure Direct Object Reference (CVSS 6.5)
• CVE-2025-3530 — WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Product Price Manipulation (CVSS 7.5)
• CVE-2025-3529 — WordPress Simple PayPal Shopping Cart <= 5.1.2 - Unauthenticated Information Exposure via file_url Parameter (CVSS 8.2)
• CVE-2024-12622 — WordPress Simple Shopping Cart <= 5.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2023-6497 — WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2023-1431 — (CVSS 5.3)
• CVE-2022-4672 — WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode (CVSS 5.4)
• CVE-2013-2705 — (CVSS 6.8)