high7.2
CVE-2023-1124
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perfor…
Impact
The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpeasycart | Wp Easycart | before 5.4.3 |