Description
WordPress Plugin TheCartPress eCommerce Shopping Cart is prone to multiple vulnerabilities, including cross-site scripting, cross-site request forgery, local file inclusion and security bypass vulnerabilities. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, allowing the attacker to steal cookie-based authentication credentials and launch other attacks, to gain unauthorized access to the affected application, to obtain sensitive information or to perform otherwise restricted actions and subsequently browse orders of other users or steal all currently-existing orders. WordPress Plugin TheCartPress eCommerce Shopping Cart version 1.3.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.3.9.3 or latest
References
https://www.htbridge.com/advisory/HTB23254
https://www.exploit-db.com/exploits/36860/
http://seclists.org/bugtraq/2015/Apr/196
http://thecartpress.com/extend/important-note-nota-importante/
Related Vulnerabilities
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-4042)
WordPress 2.0.5 Invalid CSRF Token Cross-Site Scripting Vulnerability (0.6.2 - 2.0.5)
Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-14830)