Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in WP e-Commerce – Store Toolkit 2.0.1

  • Severity: critical
  • Status: Fixed
  • Publication: February 15, 2016

The WP e-Commerce – Store Toolkit plugin is a plugin that is used for WordPress websites. Unfortunately, attackers can bypass the security measures put in place by the plugin as the plugin is missing a capability check in its ~/store-toolkit.php file. This vulnerability affects all versions of the plugin up to and including version 2.0.1. Attackers exploiting this vulnerability can perform sensitive administrative actions such as resetting file download sales.

Detected in:

WP e-Commerce – Store Toolkit fixed vulnerable versions: >= * <= 2.0.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.