Thecartpress
7 CVEs across 4 Thecartpress products. Browse Thecartpress vulnerabilities, severities, and proof-of-concept exploits.
Thecartpress products with known CVEs
Thecartpress CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-47932 | Critical | 9.8 | 2026-05-10 | WordPress TheCartPress 1.5.3.6 contains an unauthenticated privilege escalation vulnerability that allows attackers to create administrator accounts by submitt… |
CVE-2015-4582 | High | 7.2 | 2025-04-28 | The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Ora… |
CVE-2024-5938 | Medium | 6.4 | 2024-07-02 | The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up… |
CVE-2015-3302 | High | 7.5 | 2017-12-29 | The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtai… |
CVE-2015-3986 | | | 2015-05-14 | Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPr… |
CVE-2015-3301 | | | 2015-05-14 | Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3… |
CVE-2015-3300 | | | 2015-05-14 | Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for Wo… |
CVE-2011-5207 | | | 2012-10-04 | Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote at… |