WordPress security by component
Cart66 Cloud
Plugin description
Cart66 Cloud is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 17, 2025; the highest CVE/CNA score is 7.1.
Plugin slug:
cart66-cloudLatest vulnerability
CVE-2025-32653: Cart66 Cloud: Cross-site scripting
Cart66 Cloud is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
| Safe version |
|
||
|---|---|---|---|
| Apr 17, 2025 |
CVE-2025-32653
Cart66 Cloud: Cross-site scripting
Cart66 Cloud is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Apr 12, 2025 |
CVE-2025-2841
Cart66 Cloud: Sensitive information exposure
Cart66 Cloud is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|