Boot Store

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-4582 Apr 28, 16:15 HIGH This Week

The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS Oracle Boot Store +2

NVD

CVSS 3.1

7.2

EPSS

0.3%

CVE-2024-5938 Jul 02, 02:15 MEDIUM This Month

The Boot Store theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter within the theme's Button shortcode in all versions up to, and including, 1.6.4 due to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Boot Store Thecartpress Wordpress Theme

NVD

CVSS 3.1

6.4

EPSS

0.2%

CVE-2015-4582

EPSS 0% CVSS 7.2

HIGH This Week

PHP WordPress XSS +4

NVD

CVE-2024-5938

EPSS 0% CVSS 6.4

MEDIUM This Month

WordPress XSS Boot Store +2

NVD