CoCart Headless

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CoCart Headless records in CISA KEV

No CoCart Headless vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42499 CVE-2026-59536 · GHSA-59gg-9xc5-98jf

WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability

LOW 39

Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-07-27 No fix listed CWE-862

TI-2023-25559 CVE-2023-47241 · GHSA-h897-v8rp-9crr

WordPress CoCart – Headless ecommerce plugin <= 3.11.2 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headles…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00396 Published 2025-01-02 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0