PatchTheCVEreality66 vulnerabilities
Recent CVEs affecting reality66 products. 3 tracked.
reality66 has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-01-02. Highest priority: CVE-2014-9305 (score 50/100).
- CVE-2014-9461 LOW 3.5 UPGRADE Directory traversal vulnerability in models/Cart66.php in the Cart66 Lite plugin before 1.5.4 for WordPress al
- CVE-2014-9442 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allo
- CVE-2014-9305 MEDIUM 6.5 UPGRADE SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite
FAQ
How do I fix reality66 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is reality66 being exploited right now?
None of the tracked reality66 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which reality66 CVE should I patch first?
CVE-2014-9305 currently ranks highest (50/100): SQL injection vulnerability in the shortcodeProductsTable function in models/Cart66Ajax.php in the Cart66 Lite.