← Database

CVE-2023-1124

HIGH CVSS: 7.2 Published: 2023-04-03 Modified: 2026-06-17

Description

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.

Affected Platforms

Wpeasycart Wp Easycart

Weakness Type

NVD-CWE-noinfo, CWE-552

References