Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: TheCartPress Component: Thecartpress Ecommerce Shopping Cart Clear all filters
TI-2015-02922 CVE-2015-3302 · GHSA-r4j5-63wj-7p3r

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce…

Priority MEDIUM 53

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.22232 Published 2017-12-29 No fix listed CWE-284
TI-2015-02921 CVE-2015-3301 · GHSA-cpqp-qv9c-w5hq

Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The…

Priority LOW 30

Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote administrators to read arbitrary files via…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.09101 Published 2015-05-14 No fix listed CWE-22
TI-2015-02920 CVE-2015-3300 · GHSA-rrfq-3wrx-cpcp

Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce…

Priority LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allow remote attackers to inject arbit…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.06376 Published 2015-05-14 No fix listed CWE-79