WordPress CartPress Plugin Zero Day Disclosure

Another round of WordPress vulnerability disclosures has taken place with details made public on a handful of unpatched bugs in the CartPress ecommerce plugin. These disclosures come on the heels of a separate disclosure of a zero-day in the WordPress core engine. Those vulnerabilities have since...

WordPress CartPress Plugin 'tcp_post_ids' Parameter Cross Site Scripting Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress CartPress 1.6 Cross Site Scripting

Exploit Title: CartPress plugin for Wordpress XSS Date: 12/31/2011 Author: 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/thecartpress/ Version: =1.6 fix was added to existing 1.6 Tested on: Linux Description: Due to lack of filtering, malicious users coul...