WordPress plugin
WP-Lister Lite for eBay security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium8
- Low0
All WP-Lister Lite for eBay vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.9 | Authenticated (Shop Manager+) SQL Injection ≤3.8.11Update to 3.8.12 | CVE-2026-66628 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request ≤3.8.9Update to 3.8.10 | CVE-2026-18595 | |
| Medium4.9 | Authenticated (Shop Manager+) SQL Injection via 'orderby' Parameter ≤3.8.8Update to 3.8.9 | CVE-2026-11973 | |
| Medium5.3 | Missing Authorization ≤3.8.5Update to 3.8.6 | CVE-2026-25384 | |
| Medium4.3 | Missing Authorization ≤3.8.3Update to 3.8.5 | CVE-2025-62881 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.6.3Update to 3.6.5 | CVE-2024-47380 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.6.0Update to 3.6.1 | CVE-2024-43306 | |
| High7.2 | Authenticated (Shop Manager+) Arbitrary File Upload ≤3.5.11Update to 3.6.0 | CVE-2024-32836 | |
| Medium4.4 | Authenticated (Shop Manager+) Stored Cross-Site Scripting ≤3.5.11Update to 3.6.0 | CVE-2024-32573 | |
| Medium6.1 | Reflected Cross-Site Scripting via 's' ≤3.5.7Update to 3.5.8 | CVE-2024-22307 |
- Medium4.9Authenticated (Shop Manager+) SQL Injection
≤3.8.11Update to 3.8.12
- High7.2Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request
≤3.8.9Update to 3.8.10
- Medium4.9Authenticated (Shop Manager+) SQL Injection via 'orderby' Parameter
≤3.8.8Update to 3.8.9
- Medium5.3Missing Authorization
≤3.8.5Update to 3.8.6
- Medium4.3Missing Authorization
≤3.8.3Update to 3.8.5
- Medium6.1Reflected Cross-Site Scripting
≤3.6.3Update to 3.6.5
- Medium6.1Reflected Cross-Site Scripting
≤3.6.0Update to 3.6.1
- High7.2Authenticated (Shop Manager+) Arbitrary File Upload
≤3.5.11Update to 3.6.0
- Medium4.4Authenticated (Shop Manager+) Stored Cross-Site Scripting
≤3.5.11Update to 3.6.0
- Medium6.1Reflected Cross-Site Scripting via 's'
≤3.5.7Update to 3.5.8
WP-Lister Lite for eBay: common questions
Does WP-Lister Lite for eBay have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WP-Lister Lite for eBay: 2 high, 8 medium. None are known to affect version null.
How do I check which version of WP-Lister Lite for eBay I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP-Lister Lite for eBay vulnerability?
CVE-2026-66628, published Sep 17, 2026: WP-Lister Lite for eBay <= 3.8.11 - Authenticated (Shop Manager+) SQL Injection. Severity: Medium (CVSS 4.9).
Is any WP-Lister Lite for eBay vulnerability listed in CISA KEV?
No. None of the known WP-Lister Lite for eBay vulnerabilities is currently listed in the CISA KEV catalog.