High severity7.2NVD Advisory· Published Apr 28, 2025· Updated Jun 17, 2026

CVE-2015-4582

Description

The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Oracle product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Thecartpress/Boot Store2 versions
cpe:2.3:a:thecartpress:boot_store:1.6.4:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:thecartpress:boot_store:1.6.4:*:*:*:*:wordpress:*:*
- (no CPE)range: 1.6.4
WordPress/TheCartPress boot-storellm-create
Range: =1.6.4
WordPress/Boot Storewp-canonicalize

Patches

Vulnerability mechanics

References

themes.trac.wordpress.org/browser/boot-store/1.6.4/header.phpnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000