Zao Wp Ecommerce vulnerabilities

1 vulnerability

Known vulnerabilities in Zao Wp Ecommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3MediumCVE-2024-1516justinsainton · wp ecommerce +2 moreWP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post CreationThe WP eCommerce plugin for WordPress is vulnerable to unauthorized arbitrary post creation due to a missing capability check on the check_for_saas_push() function in all versions up to, and including, 3.15.1. This makes it possible for unauthenticated attackers to create arbitrary posts with arbitrary content.EPSS0.42%