CVE-2021-34645

The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.

• CWE-352
• CWE-352

• https://plugins.trac.wordpress.org/browser/wp-easycart/trunk/admin/inc/wp_easycart_admin_initial_setup.php?rev=2463792#L240Patch, Third Party Advisory
• https://wordfence.com/vulnerability-advisories/#CVE-2021-34645Third Party Advisory
• https://plugins.trac.wordpress.org/browser/wp-easycart/trunk/admin/inc/wp_easycart_admin_initial_setup.php?rev=2463792#L240Patch, Third Party Advisory
• https://wordfence.com/vulnerability-advisories/#CVE-2021-34645Third Party Advisory

Published

Aug 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3464A DLL search path vulnerability was reported in Lenovo PCMan…7.8
• CVE-2021-34640The Securimage-WP-Fixed WordPress plugin is vulnerable to Re…6.1
• CVE-2021-34641The SEOPress WordPress plugin is vulnerable to Stored Cross-…5.4
• CVE-2021-34642The Smart Email Alerts WordPress plugin is vulnerable to Ref…6.1
• CVE-2021-34643The Skaut bazar WordPress plugin is vulnerable to Reflected …6.1
• CVE-2021-34644The Multiplayer Games WordPress plugin is vulnerable to Refl…6.1
• CVE-2021-34646Versions up to, and including, 5.4.3, of the Booster for Woo…9.8
• CVE-2021-34647The Ninja Forms WordPress plugin is vulnerable to sensitive …6.5
• CVE-2021-34648The Ninja Forms WordPress plugin is vulnerable to arbitrary …4.3
• CVE-2021-34649The Simple Behance Portfolio WordPress plugin is vulnerable …6.1
• CVE-2021-3465Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-34650The eID Easy WordPress plugin is vulnerable to Reflected Cro…6.1