Ecwid by Lightspeed Ecommerce Shopping Cart

Explore Ecwid by Lightspeed Ecommerce Shopping Cart vulnerabilities across all versions. Currently tracking 13 known vulnerabilities, including severity, impact, and patch status.

01234567891021.10.2009Today08.08.20169.8Ecwid Ecommerce Shopping Cart <= 4.4.3 - Unauthenticated PHP Object injection CVSS 9.8 · 08.08.201609.07.20225.4Ecwid Ecommerce Shopping Cart <= 6.10.22 - Insufficient Access Control on Multiple AJAX Actions CVSS 5.4 · 09.07.202211.07.20228.8Ecwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update CVSS 8.8 · 11.07.202227.01.20234.3Ecwid Ecommerce Shopping Cart <= 6.11.3 - Cross Site Request Forgery CVSS 4.3 · 27.01.202317.03.20236.4Ecwid Shopping Cart <= 6.11.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 17.03.202307.11.20235.4Ecwid Ecommerce Shopping Cart <= 6.12.3 - Missing Authorization on multiple functions CVSS 5.4 · 07.11.202328.11.20234.3Ecwid Ecommerce Shopping Cart <= 6.12.4 - Cross-Site Request Forgery CVSS 4.3 · 28.11.202329.03.20246.4Ecwid Ecommerce Shopping Cart <= 6.12.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 29.03.202417.02.20254.3Ecwid by Lightspeed Ecommerce Shopping Cart <= 6.12.27 - Cross-Site Request Forgery to Send Deactivation Message CVSS 4.3 · 17.02.202504.04.20256.4Ecwid Shopping Cart <= 7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 04.04.202512.01.20265.3Ecwid Shopping Cart <= 7.0.6 - Missing Authorization CVSS 5.3 · 12.01.202619.01.20264.3Ecwid Shopping Cart <= 7.0.5 - Missing Authorization CVSS 4.3 · 19.01.202614.02.20268.8Ecwid by Lightspeed Ecommerce Shopping Cart <= 7.0.7 - Authenticated (Subscriber+) Privilege Escalation via ec_store_admin_access CVSS 8.8 · 14.02.2026

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

13

Get automatic notifications for all Ecwid by Lightspeed Ecommerce Shopping Cart vulnerabilities before they are exploited.

Vulnerability Records

13 records
2026-02-14 14:30CVE-2026-1750
8.8
High
Nguyen Ngoc Duc (duc193)Yes
2026-01-19 00:00CVE-2026-24580
4.3
Medium
Rapid0nionYes
2026-01-12 00:00CVE-2026-24613
5.3
Medium
Legion HunterYes
2025-04-04 00:00CVE-2025-32195
6.4
Medium
Ngô Thiên An (ancorn_)Yes
2025-02-17 00:00CVE-2024-13795
4.3
Medium
Brian Sans-Souci (liardom)Yes
2024-03-29 00:00CVE-2024-2456
6.4
Medium
Krzysztof ZającYes
2023-11-28 00:00CVE-2023-51533
4.3
Medium
Brandon James Roldan (tomorrowisnew)Yes
2023-11-07 00:00N/A
5.4
Medium
AnonymousYes
2023-03-17 00:00CVE-2023-24408
6.4
Medium
István MártonYes
2023-01-27 00:00CVE-2023-24377
4.3
Medium
István MártonYes
Showing 1–10 of 13 reports
Ecwid by Lightspeed Ecommerce Shopping Cart banner
Latestv7.0.8

Ecwid by Lightspeed Ecommerce Shopping Cart

Ecwid by Lightspeed Ecommerce Shopping Cart

Author

Ecwid by Lightspeed Ecommerce Shopping Cart

4.5(228)
90/100
Last Updated
2026-02-13 (6mo ago)
Active Installs
20,000+
Downloads
2,994,698
Requires WP
4.4+
Requires PHP
0+
Tested up to
WP 6.9.5
Created
2009-10-21 (17y ago)

Ecwid Ecommerce Shopping Cart is everything you need to add an online store to your WordPress site. Powerful, easy-to-use and Gutenberg-friendly. Hundreds of thousands of sellers in 175 countries, 45 languages supported. PayPal, Stripe and 70+ more payment options. Real-time shipping integrations. Selling on Instagram and Facebook. Automatic Shipping and Taxes The Ecwid ecommerce plugin integrates with major carriers including USPS, UPS, FedEx, Canada Post, Australia Post, and others to automatically calculate shipping rates. Taxes are also automated and can be set-up in a few clicks. Automated tax rate calculations are available for the U.S., Canada, and EU VAT. Additionally, integration with TaxJar provides automatic sales tax reporting and filing in the U.S. Sell on Facebook and Instagram Add your online store to Facebook and sell to millions of Facebook and Instagram users. No addons needed. Ecwid will automatically synchronize your products, customers, orders and inventory between your WordPress and Facebook storefronts. Join! eCommerce Mobile Apps Ecwid Shopping Cart provides mobile applications for iOS and Android to manage your store and sell on the go. Scan products, track inventory, manage sales and accept payments using your mobile device as a POS station. Your ecommerce data is automatically synchronized with your WordPress shopping cart, Facebook store and other online storefronts. Unlimited Storage, Automatic Backups and Seamless Upgrades With the Ecwid Shopping Cart, your online store data is fully hosted on our secure servers. Regardless of the WordPress hosting service you use, your Ecwid online store includes: unlimited storage regular backups seamless upgrades and security updates So you don’t need to worry about software updates, security patches and server maintenance – we do that for you. Your online store gets all the new ecommerce features and bug fixes automatically. PCI DSS validated Level 1 Service Provider Ecwid Shopping Cart is PCI DSS Level 1 certified, which is the gold standard for e-commerce solutions worldwide. This means that Ecwid helps your online store meet the security requirements of the bank you do business with. Superb Support Friendly and knowledgeable support experts available 24/5 so you can get immediate help when you need it. Support options include email, e-commerce community forums, chat and phone support. Sell Everywhere With Ecwid, you can include your ecommerce shop on multiple websites, blogs, social sites and ecommerce marketplaces like Amazon, eBay and Google Shopping and sell simultaneously everywhere. Add your online store to as many sites as you want, manage it from one place. Mobile Responsive Design Ecwid works great on any WordPress site, especially those running on mobile-optimized themes. Your online store looks perfect on smartphones and automatically adapts to your customer’s screen size: laptops, tablets, smart TVs or smart watches. Hundreds of extensions and powerful API There is a lot of in-house and third party extensions built on the Ecwid Ecommerce APIs. You can find a ready made plugin extending features of your online storefront the way you want or build a custom addon yourself. The existing family of third party plugins include tax automation apps like TaxJar, fulfilment services like ShipStation, customer support tools like LiveChat and many others. Plans start at just $5/mo Start selling ealisy with no big investment. As your online shop grows, Ecwid grows with you. When the time is right, consider upgrading your store to one of our premium plans to get more robust features and preferred support. See also: Ecwid plan and pricing See Ecwid In Action Ecwid Ecommerce Control panel (you will be able to create an Ecwid account) Showcase Ecwid Site www.ecwid.com Terms of usage The plugin uses the Ecwid ecommerce cloud services (www.ecwid.com). Your store data is securely hosted with Ecwid under the terms and conditions listed here: Terms of Service Privacy Policy The plugin uses CDN services by AWS Cloudfront to speed up user stores. It is managed by the Ecwid Terms of Service and Privacy Policy and AWS Customer Agreement.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C