VYPR

CoCart – Headless ecommerce

by WordPress

CVEs (2)

  • CVE-2023-47241MedJan 2, 2025
    risk 0.34cvss 5.3epss 0.00

    Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: from n/a through <= 3.11.2.

  • CVE-2026-59536HigJul 27, 2026
    risk 0.00cvss 7.5epss 0.00

    Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.