Researchers Find Vulnerability in WordPress Shopping Cart Plugin eShop

Another vulnerability has been found in a WordPress plug-in, this one an arbitrary variable overwrite, which was publicly disclosed Wednesday by High-Tech Bridge Security Research Lab. The eShop WordPress Plugin version 6.3.11 was discovered on April 15 to have insufficient validation of user-supplied input in the “eshopcart” HTTP cookie.