CVE-2023-1124

Published: 2023-04-03T15:15Z

Last Modified: 2025-02-14T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticated users with admin privileges to perform LFI attacks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt