thecartpress

Top products

The 8 most recently published vulnerabilities affecting thecartpress.

• CVE-2021-47932WordPress TheCartPress 1.5.3.6 Privilege Escalation Unauthenticated9.8May 10, 2026
• CVE-2015-4582The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Oracle product.7.2Apr 28, 2025
• CVE-2024-5938Boot Store <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode6.4Jul 2, 2024
• CVE-2015-3302The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information b...7.5Dec 29, 2017
• CVE-2015-3986Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attac...4.3May 14, 2015
• CVE-2015-3301Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote administrators to r...4.0May 14, 2015
• CVE-2015-3300Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allow remote at...4.3May 14, 2015
• CVE-2011-5207Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script...4.3Oct 4, 2012