95 matches found
CVE-2026-96837
Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...
EUVD-2026-89889
Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...
CVE-2026-96837 WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...
CVE-2026-96837
The CartFlows WordPress plugin (versions
CVE-2026-96837 WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...
CVE-2026-96837: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...
PT-2026-103221
Contributor Remote Code Execution RCE in CartFlows = 3.2.0 versions...
WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Hippolyte Quere Hippie in WordPress Plugin CartFlows versions = 3.2.0...
CVE-2026-39477
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
EUVD-2026-20144
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
CVE-2026-39477
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
CVE-2026-39477
CVE-2026-39477 refers to a missing authorization vulnerability in the WordPress plugin CartFlows (Brainstorm Force), affecting CartFlows versions up to 2.2.3. The root cause is an incorrectly configured access-control mechanism that allows exploitation of access levels. CVSS 3.1 base metrics indi...
CVE-2026-39477 WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
CVE-2026-39477
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
CVE-2026-39477 WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
WordPress plugin CartFlows has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
PT-2026-31119
Name of the Vulnerable Software and Affected Versions CartFlows versions through 2.2.3 Description The software contains a flaw due to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendations Update to a version later than 2.2.3...
CVE-2026-39477: Missing Authorization
Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CartFlows: from n/a through = 2.2.3...
WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin CartFlows versions = 2.2.3...