https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:28:36 +0000 https://cve.radiocsirt.org/vuln/cve-2025-3530 <p><strong>Affected:</strong> mra13 Simple Shopping Cart</p> <p>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter &#39;product_tmp_two&#39; for computing a security hash against price tampering while using &#39;wspsc_product&#39; to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item.</p> <p><strong>Affected:</strong> mra13 Simple Shopping Cart</p> <p>The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter &#39;product_tmp_two&#39; for computing a security hash against price tampering while using &#39;wspsc_product&#39; to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item.</p> https://cve.radiocsirt.org/vuln/cve-2025-3530