beyondcart

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

beyondcart records in CISA KEV

No beyondcart vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-07848 CVE-2025-8570 · GHSA-3j9m-4q8w-cqcp

Hard-coded credentials in BeyondCart Connector

MEDIUM 50

The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 3.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00662 Published 2025-09-11 No fix listed CWE-798

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0