CVE-2015-3302

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows…

mitre·CWE-284·Published 2017-12-29

CVSS

—

EPSS

0.22

KEV

Exploits

cve.orgen

246 chars

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken authentication mechanism."

NVDen

246 chars

NVDes

304 chars

El plugin TheCartPress eCommerce Shopping Cart (también conocido como The Professional WordPress eCommerce Plugin) para WordPress, en versiones anteriores a la1.3.9.3, permite que atacantes remotos obtengan información sensible sobre detalles de pedidos aprovechando un "mecanismo de autenticación roto".

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N