How many wp-ecommerce wp ecommerce CVEs are in CISA KEV?

None of wp-ecommerce wp ecommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for wp-ecommerce wp ecommerce vulnerabilities?

Yes — 1 of wp-ecommerce wp ecommerce's CVEs have a known public exploit.

Which versions of wp-ecommerce wp ecommerce are affected?

1 distinct wp-ecommerce wp ecommerce version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wp-ecommerce wp ecommerce CVEs?

wp-ecommerce wp ecommerce's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical wp-ecommerce wp ecommerce vulnerabilities are there?

wp-ecommerce wp ecommerce has 1 critical and 0 high-severity CVEs.

What is the average severity of wp-ecommerce wp ecommerce CVEs?

The average CVSS base score across wp-ecommerce wp ecommerce's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wp-ecommerce

2 CVEs

wp-ecommerce wp ecommerce Vulnerabilities

Name: wp-ecommerce wp ecommerce vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wp ecommerce by wp-ecommerce.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.0

Avg CVSS

2024–2026

Last updated March 6, 2026

Overview

wp-ecommerce wp ecommerce has 2 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wp-ecommerce wp ecommerce, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wp-ecommerce wp ecommerce's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wp-ecommerce wp ecommerce's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of wp-ecommerce wp ecommerce's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every wp-ecommerce wp ecommerce version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.15.11 CVE

Find a version

2 CVEs

Sort

WP eCommerce <= 3.15.1 - Coupon Deletion via CSRF
CVE-2026-1128
Public exploit
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.1% (1th pct)2026-03-06
WP eCommerce <= 3.15.1 - Unauthenticated SQL Injection
CVE-2024-1514
Patch
CWE-89
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2024-02-28

Common weakness types

The CWE weakness categories most often found in wp-ecommerce wp ecommerce CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wp-ecommerce wp ecommerce CVEs were published each year.

2024

1

2026

1

Other wp-ecommerce products

Browse vulnerabilities for other products by wp-ecommerce.

easy wp smtp8 CVEs Recurring PayPal Donations2 CVEs Sell Digital Downloads1 CVEs wp-e-commerce1 CVEs WP eCommerce WordPress plugin1 CVEs

All wp-ecommerce vulnerabilities

Frequently asked questions

Common questions about wp-ecommerce wp ecommerce vulnerabilities.

How many CVEs does wp-ecommerce wp ecommerce have?: wp-ecommerce wp ecommerce has 2 published CVE records since 2024.
How many wp-ecommerce wp ecommerce CVEs are in CISA KEV?: None of wp-ecommerce wp ecommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wp-ecommerce wp ecommerce vulnerabilities?: Yes — 1 of wp-ecommerce wp ecommerce's CVEs have a known public exploit.
Which versions of wp-ecommerce wp ecommerce are affected?: 1 distinct wp-ecommerce wp ecommerce version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wp-ecommerce wp ecommerce CVEs?: wp-ecommerce wp ecommerce's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical wp-ecommerce wp ecommerce vulnerabilities are there?: wp-ecommerce wp ecommerce has 1 critical and 0 high-severity CVEs.
What is the average severity of wp-ecommerce wp ecommerce CVEs?: The average CVSS base score across wp-ecommerce wp ecommerce's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wp-ecommerce wp ecommerce vulnerabilities

Monitor new wp-ecommerce wp ecommerce vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing