PatchTheCVEcart66 lite vulnerabilities and fixes
Recent CVEs affecting cart66 lite, with upgrade or downgrade steps. 3 tracked.
Also searched as: cart66lite.
cart66 lite has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-01-02. Highest priority: CVE-2014-9305 (score 50/100).
- CVE-2014-9461 LOW 3.5 UPGRADE Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress al
- CVE-2014-9442 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allo
- CVE-2014-9305 MEDIUM 6.5 UPGRADE SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite
FAQ
How do I fix cart66 lite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cart66 lite being exploited right now?
None of the tracked cart66 lite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cart66 lite CVE should I patch first?
CVE-2014-9305 currently ranks highest (50/100): SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite.