plugin
3 known security issues reported for the Express Shop WordPress plugin. Most recent disclosed Jun 30, 2021.
Running Express Shop on your site? Check whether your installed version is affected.
Scan your site freeThe Express Shop plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.2. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to add products to a cart via a forged request granted they can trick...
The Express Shop plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.2. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to add products to a cart via a forged request granted they can trick...
The plugin did not properly check for CSRF in its qcld_express_variable_product_quick_view AJAX action, allowing attacker to make user call it via a CSRF attack.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free