Search
Find merged stories by title or summary.
cve-2026-14332
Ecwid by Lightspeed Ecommerce Shopping Cart 7. 0. 9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
CVE-2026-14332 - Ecwid by Lightspeed Ecommerce Shopping Cart 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
CVE ID : CVE-2026-14332 Published : Aug. 13, 2026, 8:13 a. m. • 52 minutes ago Description : The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7. 0. 9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an administrator reconnects it. Severity: 0.0 • NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
You've reached the end of current stories for this search.
