WordPress plugin
Ecommerce Fabrick security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Ecommerce Fabrick vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery (CSRF) via ajax_unset_default_card ≤20221130Update to 20240307 | CVE-2024-0433 | |
| Medium4.3 | Cross-Site Request Forgery (CSRF) via ajax_delete_card ≤20221130Update to 20240307 | CVE-2024-0432 | |
| Medium4.3 | Cross-Site Request Forgery (CSRF) via ajax_set_default_card ≤20221130Update to 20240307 | CVE-2024-0431 |
- Medium4.3Cross-Site Request Forgery (CSRF) via ajax_unset_default_card
≤20221130Update to 20240307
- Medium4.3Cross-Site Request Forgery (CSRF) via ajax_delete_card
≤20221130Update to 20240307
- Medium4.3Cross-Site Request Forgery (CSRF) via ajax_set_default_card
≤20221130Update to 20240307
Ecommerce Fabrick: common questions
Does Ecommerce Fabrick have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Ecommerce Fabrick: 3 medium. None are known to affect version null.
How do I check which version of Ecommerce Fabrick I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ecommerce Fabrick vulnerability?
CVE-2024-0433, published Feb 27, 2024: Gestpay for WooCommerce <= 20221130 - Cross-Site Request Forgery (CSRF) via ajax_unset_default_card. Severity: Medium (CVSS 4.3).
Is any Ecommerce Fabrick vulnerability listed in CISA KEV?
No. None of the known Ecommerce Fabrick vulnerabilities is currently listed in the CISA KEV catalog.