Read the docs

TheCartPress

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TheCartPress records in CISA KEV

No TheCartPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Thecartpress Ecommerce Shopping Cart 4 records MEDIUM Boot Store 2 records LOW Thecartpress 1 record LOW

Records

4 records in Thecartpress Ecommerce Shopping Cart · all components

TI-2015-02922 CVE-2015-3302 · GHSA-r4j5-63wj-7p3r

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce…

Priority MEDIUM 53

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.22232 Published 2017-12-29 No fix listed CWE-284
TI-2015-02921 CVE-2015-3301 · GHSA-cpqp-qv9c-w5hq

Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The…

Priority LOW 30

Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote administrators to read arbitrary files via…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.09101 Published 2015-05-14 No fix listed CWE-22
TI-2015-02920 CVE-2015-3300 · GHSA-rrfq-3wrx-cpcp

Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allow remote attackers to inject arbit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06376 Published 2015-05-14 No fix listed CWE-79
Open these records in search →