Carts.guru

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Carts.guru records in CISA KEV

No Carts.guru vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Carts Guru 1 record MEDIUM Cartsguru 1 record HIGH

Records

2 records

TI-2023-20712 CVE-2023-39642 · GHSA-729g-8jmx-q95q

Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability…

HIGH 82

Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2023-09-14 No fix listed CWE-89

TI-2019-09132 CVE-2019-12241 · GHSA-mqx7-42qx-68xr

The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a…

MEDIUM 47

The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02347 Published 2019-05-20 No fix listed CWE-502

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0