WP e-Commerce – Store Toolkit
WP e-Commerce – Store Toolkit has one disclosed vulnerability in the WordSec catalog, all reported in 2016; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for WP e-Commerce – Store Toolkit has a vendor fix available, so running the current release closes it.
All of these findings were reported by James Golovich. WP e-Commerce – Store Toolkit is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.9.40.
WP e-Commerce – Store Toolkit <= 2.0.1 - Missing Authorization
Read the full analysisVulnerability Records

WP e-Commerce – Store Toolkit
Author
Michael Visser
This is a legacy Plugin, please see WP e-Commerce – Store Toolkit for the latest release.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C