Vulnerabilities (CVE)

Filtered by vendor Thecartpress Subscribe
Filtered by product Thecartpress Ecommerce Shopping Cart
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-3302 1 Thecartpress 1 Thecartpress Ecommerce Shopping Cart 2018-10-09 5.0 MEDIUM 7.5 HIGH
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken authentication mechanism."