2 matches found
PT-2019-12712
Name of the Vulnerable Software and Affected Versions The Carts Guru plugin version 1.4.5 Description The issue allows for Insecure Deserialization via a cartsguru-source cookie to the classes/wc-cartsguru-event-handler.php file. Recommendations For The Carts Guru plugin version 1.4.5, consider...
9.8CVSS0.02347EPSS
SaveExploits1References4
CVE-2019-12241: Deserialization of Untrusted Data
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php...
9.8CVSS5.8AI score0.02347EPSS
SaveExploits1References2
20