Description
Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin before 3.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings.
References (3)
Core 3
Core References
Various Sources x_refsource_confirm
http://www.tipsandtricks-hq.com/ecommerce/wordpress-shopping-cart-change-log-319
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/93953
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/52963
Scores
EPSS
0.0108
EPSS Percentile
61.0%
Details
CWE
CWE-352
Status
published
Products (25)
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.2
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.2.2
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.3
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.4
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.5
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.6
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.7
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.8
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
1.9
tipsandtricks-hq/wordpress_simple_paypal_shopping_cart
2.0
... and 15 more
Published
May 13, 2014
Tracked Since
Feb 18, 2026