← Back

Carts.guru

carts.guru

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Carts Guru
carts_guru
1 CVE
Cartsguru
cartsguru
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-39642
1Carts.guru
1Cartsguru
Jun 17, 2026
Sep 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display().
CVE-2019-12241
1Carts.guru
1Carts Guru
Jun 17, 2026
May 20, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.