Vulnerabilities > Thecartpress

DATE CVE VULNERABILITY TITLE RISK
2017-12-29 CVE-2015-3302 Improper Access Control vulnerability in Thecartpress Ecommerce Shopping Cart
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken authentication mechanism."
network
low complexity
thecartpress CWE-284
7.5