Input validation vulnerability in TheCartPress eCommerce Shopping Cart 1.5.3.6

The TheCartPress eCommerce Shopping Cart (also known as The Professional WordPress eCommerce Plugin) plugin for WordPress had a security issue before version 1.3.9.3 that allowed malicious people to gain access to administrator accounts on the website. They could do this by manipulating a parameter in a page related to the checkout process to access a file they should not have access to.

Detected in:

TheCartPress eCommerce Shopping Cart open vulnerable versions: >= * <= 1.5.3.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.