High 7.1 Unfixed Closed
2025-11-24≤ 2.9.0
CVE-2024-14015
CVE-2024-14015
WordPress WordPress eCommerce Plugin – Studiocart Plugin < 2.5.20 is vulnerable to Cross Site Scripting (XSS)
WordPress WordPress eCommerce Plugin – Studiocart plugin < 2.3.1 - Sensitive Information Disclosure vulnerability
WordPress WordPress eCommerce Plugin – Studiocart plugin < 2.3.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability