What’s Vulnerable › Products

Simple Shopping Cart vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Simple Shopping Cart version is affected

Latest Simple Shopping Cart vulnerabilities

• CVE-2026-104642 — Simple Shopping Cart 5.1.3 - 5.3.2 - Contributor+ Price Manipulation via Price Verification Bypass (CVSS 2.7)
• CVE-2026-104641 — Simple Shopping Cart < 5.3.3 - Unauthenticated Payment Bypass via Unverified PayPal IPN Recipient (CVSS 5.3)
• CVE-2026-104119 — Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials (CVSS 3.5)