RapidExpCart
RapidExpCart has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; none of them are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
None of the 2 issues recorded for RapidExpCart have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.
All of these findings were reported by Shreya Pohekar. The current release is tested up to WordPress 3.0.5.
CVE-2023-0520RapidExpCart <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records
RapidExpCart
Author
rapidexp
RapidExpCart is a shopping cart system composed of two programs that consist of a WordPress plugin and a main program. So, you should download the main proguram from rapidexp.com besides this plugin. The main proguram needs the following system requirements. php5 + mysqli (module mode is recommended) MySql5 (InnoDB is recommended) mod_write And then, … it is only Japanese at present 🙁
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C