Cocart Headless Cocart – Headless Ecommerce
2 CVEs affecting Cocart Headless Cocart – Headless Ecommerce. Latest disclosed: 2026-07-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59536 | High | 7.5 | 2026-07-27 | Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions. |
CVE-2023-47241 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Acces… |