Ready Ecommerce Vulnerabilities

The Ready! Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery and Cross-Site Scripting in versions before 0.5.1. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to make unauthorized AJAX calls to perfor...

CVSS:

6.1

Affected:

up to 0.5.1

Fixed in:

0.5.1

Disclosed:

Sep 17, 2014

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Update the plugin.

Affected:

up to 0.5.1

Fixed in:

0.5.1

Disclosed:

Sep 17, 2014

The Ready! Ecommerce Shopping Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery and Cross-Site Scripting in versions before 0.5.1. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to make unauthorized AJAX calls to perfor...

Affected:

up to 0.5.1

Fixed in:

0.5.1

Disclosed:

Sep 17, 2014

The ready-ecommerce WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affected:

up to 0.5.1

Fixed in:

0.5.1