WordPress plugin
TheCartPress eCommerce Shopping Cart security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High2
- Medium3
- Low0
All TheCartPress eCommerce Shopping Cart vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Privilege Escalation ≤1.5.3.6No patch available | CVE-2021-47932 | |
| High7.5 | Sensitive Information Disclosure ≤1.5.3.6No patch available | CVE-2015-3302 | |
| High8.8 | TheCartPress eCommerce Shopping Cart <= 1.5.3.6 Cross-Site Request Forgery ≤1.5.3.6No patch available | CVE-2015-3986 |
- Critical9.8Unauthenticated Privilege Escalation
≤1.5.3.6No patch available
- High7.5Sensitive Information Disclosure
≤1.5.3.6No patch available
- High8.8TheCartPress eCommerce Shopping Cart <= 1.5.3.6 Cross-Site Request Forgery
≤1.5.3.6No patch available
TheCartPress eCommerce Shopping Cart: common questions
Does TheCartPress eCommerce Shopping Cart have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in TheCartPress eCommerce Shopping Cart: 1 critical, 2 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of TheCartPress eCommerce Shopping Cart I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent TheCartPress eCommerce Shopping Cart vulnerability?
CVE-2021-47932, published May 10, 2026: TheCartPress eCommerce Shopping Cart <= 1.5.3.6 - Unauthenticated Privilege Escalation. Severity: Critical (CVSS 9.8).
Is any TheCartPress eCommerce Shopping Cart vulnerability listed in CISA KEV?
No. None of the known TheCartPress eCommerce Shopping Cart vulnerabilities is currently listed in the CISA KEV catalog.