Cart66 Cart66 Lite Plugin — known CVE vulnerabilities

Every CVE whose affected-product data names Cart66 Cart66 Lite Plugin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2013-5977 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote…
• CVE-2013-5978 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote…