Api2Cart Bridge Connector
Api2Cart Bridge Connector has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high. 2022 was the busiest year with 2 disclosures.
The most common weakness is Code Injection, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.
Every one of the 2 issues recorded for Api2Cart Bridge Connector has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Dave Jong. Api2Cart Bridge Connector is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2022-42698Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload
Read the full analysisVulnerability Records

Api2Cart Bridge Connector
Author
API2Cart
Establish the connection between a B2B system and WooCommerce or WP-eCommerce stores. Use the ready connection to make synchronization of such client store information as products, categories, orders, and customers possible. WHAT IS API2Cart? API2Cart is a unified API to integrate with 40+ shopping carts and marketplaces including Magento, Shopify, BigCommerce, WooCommerce, PrestaShop, Demandware, Amazon, and others. We are also constantly expanding our list of platforms to meet the needs of our customers. Experience the API2Cart Advantage Seamless Integration: Integrate seamlessly with WooCommerce and eliminate the hassle of managing multiple platforms. Unified API: Manage 40+ shopping carts and marketplaces with a single API. Comprehensive Data Management: Easily retrieve, add, delete, update, and synchronize store data such as orders, customers, products, baskets, and categories from all or any of the supported platforms. See all methods and platforms we support. Developer-Friendly Tools: Utilize our SDK and detailed documentation to connect multiple shopping carts and marketplaces with ease. The plugin allows to set up the connection between B2B software such as inventory and order management systems, mobile app building software, e-mail marketing services, etc. and WooCommerce or WP-eCommerce stores in order to retrieve, synchronize and manipulate various store data such as orders, products, categories, prices, customers, abandoned carts, tracking numbers, etc. Key Features establishes a secure link with WooCommerce stores enables to access store databases to get, add, delete, and synchronize such data as products, categories, customers, and orders makes it possible to use this data to do the following: automate accounting, billing, inventory and order management, and other business processes track inventory, order, and other data updates create informative reports, widgets, and dashboards organize invoices and shipping labels create data feeds and send them multichannel reflect information and its updates into mobile stores, social pages, and international listings collect data on abandoned carts and send recovery e-mails send notifications 32-symbol key security no client FTP credentials needed Supported WooCommerce versions: 2.8.1 – 7.x.x Please note. Having the plugin installed is not enough to get and manipulate store data. It only serves as a connector that works via API2Cart, which is a service that provides unified access to the databases of WooCommerce and 30+ other shopping carts.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C