WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cart66-lite
Published
2014-08-01
Title
Cart66 Lite 1.5.1.14 - admin.php cart66-products Page Product Manipulation CSRF
Slug
cart66-lite
Published
2014-08-01
Title
Cart66 Lite - admin.php cart66-products Page Multiple Field Stored XSS
Slug
cart66-lite
Published
2014-12-03
Title
Cart66 Lite < 1.5.2 - Blind SQL Injection
Slug
cart66-lite
Published
2015-01-01
Title
Cart66 Lite <= 1.5.3 - SQL Injection
Slug
cart66-lite
Published
2015-01-26
Title
Cart66 Lite 1.5.4 - XSS
Slug
carta-online
Published
2026-03-06
Title
Carta Online < 2.15.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
cartasi-x-pay
Published
2026-04-14
Title
Nexi XPay < 8.3.2 - Missing Authorization to Unauthenticated Order Status Modification
Slug
cartasi-x-pay
Published
2026-06-17
Title
Nexi XPay < 8.3.2 - Missing Authorization
Slug
cartboss
Published
2025-04-01
Title
SMS Abandoned Cart Recovery ✦ CartBoss < 4.1.3 - Missing Authorization
Slug
carter-elementor
Published
2025-12-10
Title
Carter for Elementor <= 1.0.2 - Missing Authorization
Slug
cartflows
Published
2019-11-07
Title
Funnel Builder by CartFlows < 1.3.1 - Authenticated Arbitrary Plugin Activation
Slug
cartflows
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
cartflows
Published
2021-05-17
Title
Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID
Slug
cartflows
Published
2020-09-26
Title
WooCommerce Checkout & Funnel Builder by CartFlows < 1.5.16 - Cross-Site Request Forgery
Slug
cartflows
Published
2024-03-25
Title
Funnel Builder by CartFlows < 2.0.2 - Editor+ Stored XSS
Slug
cartflows
Published
2024-06-18
Title
WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce < 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cartflows
Published
2026-03-27
Title
CartFlows < 2.2.4 - Missing Authorization
Slug
cartflows
Published
2026-01-26
Title
CartFlows – Checkout & Funnel Builder for WooCommerce < 2.2.0 - Authenticated (Administrator+) PHP Object Injection
Slug
cartflows-pro
Published
2023-07-27
Title
CartFlows Pro < 1.11.13 - CSRF
Slug
cartflows-pro
Published
2023-07-16
Title
CartFlows Pro < 1.11.12 - Reflected Cross-Site Scripting
Slug
cartoon-url
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cartpops
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cartpops
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
carts-guru
Published
2019-05-07
Title
Carts Guru < 1.4.6 - Unauthenticated Object Injection
Slug
cas-maestro
Published
2025-03-24
Title
CAS Maestro <= 1.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting