What’s Vulnerable › Products

levelfourstorefront Shopping Cart & eCommerce Store vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your levelfourstorefront Shopping Cart & eCommerce Store version is affected

Latest levelfourstorefront Shopping Cart & eCommerce Store vulnerabilities

• CVE-2026-17553 — Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action (CVSS 7.2)
• CVE-2026-17589 — Shopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' Parameter (CVSS 4.9)
• CVE-2024-12712 — Shopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order Updates (CVSS 5.3)
• CVE-2024-7827 — Shopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number Parameter (CVSS 8.8)
• CVE-2021-34645 — Shopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 8.8)