WordPress plugin
Simple Shopping Cart security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 15 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium13
- Low0
All Simple Shopping Cart vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Product Price Manipulation ≤5.1.2Update to 5.1.3 | CVE-2025-3530 | |
| High8.2 | Unauthenticated Information Exposure via file_url Parameter ≤5.1.2Update to 5.1.3 | CVE-2025-3529 |
- High7.5Unauthenticated Product Price Manipulation
≤5.1.2Update to 5.1.3
- High8.2Unauthenticated Information Exposure via file_url Parameter
≤5.1.2Update to 5.1.3
Simple Shopping Cart: common questions
Does Simple Shopping Cart have known vulnerabilities?
Yes. VulnCrest Radar lists 15 known vulnerabilities in Simple Shopping Cart: 2 high, 13 medium. None are known to affect version null.
How do I check which version of Simple Shopping Cart I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple Shopping Cart vulnerability?
CVE-2026-104642, published Oct 19, 2026: Simple Shopping Cart 5.1.3 - 5.3.2 - Authenticated (Contributor+) Payment Bypass. Severity: Medium (CVSS 4.3).
Is any Simple Shopping Cart vulnerability listed in CISA KEV?
No. None of the known Simple Shopping Cart vulnerabilities is currently listed in the CISA KEV catalog.