Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Carts.guru records in CISA KEVNo Carts.guru vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 47
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02347 · Published 2019-05-20 · No fix listed CWE-502
Open these records in search →