Cartpauj
9 CVEs across 5 Cartpauj products. Browse Cartpauj vulnerabilities, severities, and proof-of-concept exploits.
Cartpauj products with known CVEs
Cartpauj CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-60136 | Medium | 5.9 | 2025-09-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cartpauj User Notes user-notes allows Stored XSS.This iss… |
CVE-2025-54746 | Medium | 6.5 | 2025-08-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cartpauj Shortcode Redirect shortcode-redirect allows Sto… |
CVE-2023-40673 | Medium | 6.5 | 2024-06-04 | : Improper Control of Interaction Frequency vulnerability in cartpauj Cartpauj Register Captcha allows Functionality Misuse.This issue affects Cartpauj Registe… |
CVE-2013-0735 | | | 2014-04-02 | Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL… |
CVE-2013-0734 | | | 2014-03-28 | Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web scrip… |
CVE-2013-0736 | | | 2013-10-09 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijac… |
CVE-2012-5328 | | | 2012-10-08 | Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress might allow remote authenticated user… |
CVE-2012-5327 | | | 2012-10-08 | Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 for WordPress allow remote… |
CVE-2012-5325 | | | 2012-10-08 | Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPres… |