CVE-2021-34645: Wpeasycart Shopping Cart & Ecommerce Store

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.

Affected products

• Wpeasycart Shopping Cart & Ecommerce Store: up to and including 5.1.0

Published 2021-08-19. Last modified 2026-06-17.