HighCVSS 7.5
EPSS 0.35%
Unauthenticated Broken Access Control in CoCart – Headless ecommerce <= 4.8.4 versions.
Vendor
CoCart Headless vulnerabilities
2 published CVES affecting CoCart Headless, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest CoCart Headless CVEs
Newest publication first
-
-
MediumCVSS 5.3 EPSS 0.47%
Missing Authorization vulnerability in CoCart Headless CoCart – Headless ecommerce cart-rest-api-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoCart – Headless ecommerce: from n/a through <= 3.11.2.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.