Api2Cart Bridge Connector

Api2Cart Bridge Connector has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 0 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Code Injection, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

Every one of the 2 issues recorded for Api2Cart Bridge Connector has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Dave Jong. Api2Cart Bridge Connector is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSCritical
9.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Api2Cart Bridge Connector vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2022-42698

Api2Cart Bridge Connector <= 1.1.0 - Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records
Api2Cart Bridge Connector banner
Latestv3.1.2

Api2Cart Bridge Connector

API2Cart

Author

API2Cart

0.0(0)
0/100
Last Updated
2026-09-08 (5d ago)
Active Installs
40+
Downloads
6,223
Requires WP
4.5+
Requires PHP
0+
Tested up to
WP 7.1
Created
2022-05-12 (4y ago)

Establish the connection between a B2B system and WooCommerce or WP-eCommerce stores. Use the ready connection to make synchronization of such client store information as products, categories, orders, and customers possible. WHAT IS API2Cart? API2Cart is a unified API to integrate with 40+ shopping carts and marketplaces including Magento, Shopify, BigCommerce, WooCommerce, PrestaShop, Demandware, Amazon, and others. We are also constantly expanding our list of platforms to meet the needs of our customers. Experience the API2Cart Advantage Seamless Integration: Integrate seamlessly with WooCommerce and eliminate the hassle of managing multiple platforms. Unified API: Manage 40+ shopping carts and marketplaces with a single API. Comprehensive Data Management: Easily retrieve, add, delete, update, and synchronize store data such as orders, customers, products, baskets, and categories from all or any of the supported platforms. See all methods and platforms we support. Developer-Friendly Tools: Utilize our SDK and detailed documentation to connect multiple shopping carts and marketplaces with ease. The plugin allows to set up the connection between B2B software such as inventory and order management systems, mobile app building software, e-mail marketing services, etc. and WooCommerce or WP-eCommerce stores in order to retrieve, synchronize and manipulate various store data such as orders, products, categories, prices, customers, abandoned carts, tracking numbers, etc. Key Features establishes a secure link with WooCommerce stores enables to access store databases to get, add, delete, and synchronize such data as products, categories, customers, and orders makes it possible to use this data to do the following: automate accounting, billing, inventory and order management, and other business processes track inventory, order, and other data updates create informative reports, widgets, and dashboards organize invoices and shipping labels create data feeds and send them multichannel reflect information and its updates into mobile stores, social pages, and international listings collect data on abandoned carts and send recovery e-mails send notifications 32-symbol key security no client FTP credentials needed Supported WooCommerce versions: 2.8.1 – 7.x.x Please note. Having the plugin installed is not enough to get and manipulate store data. It only serves as a connector that works via API2Cart, which is a service that provides unified access to the databases of WooCommerce and 30+ other shopping carts.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C