Unrated severityNVD Advisory· Published Aug 19, 2021· Updated May 5, 2025

Shopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting

CVE-2021-34645

Description

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wp Easycartllm-fuzzy
Range: <=5.1.0
Package: https://wordpress.org/plugins/wp-easycart
WP EasyCart/Shopping Cart & eCommerce Storev5
Range: 5.1.0

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/browser/wp-easycart/trunk/admin/inc/wp_easycart_admin_initial_setup.phpmitrex_refsource_MISC
wordfence.com/vulnerability-advisories/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000