Cart66 Lite :: WordPress Ecommerce

Cart66 Lite :: WordPress Ecommerce has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2015; all 6 are fixed as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2014 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (33%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).

Every one of the 6 issues recorded for Cart66 Lite :: WordPress Ecommerce has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by absane.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Cart66 Lite :: WordPress Ecommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2014-9442

Cart66 Lite :: WordPress Ecommerce <= 1.5.3 - SQL Injection

Read the full analysis

Vulnerability Records

6 records


2015-01-26 00:00	Cart66 Lite :: WordPress Ecommerce <= 1.5.4 - Reflected Cross-Site Scripting Cart66 Lite : < 1.5.5	`N/A`	6.1 Medium	Kenneth Jepsen	Yes
2015-01-01 00:00	Cart66 Lite - WordPress Ecommerce < 1.5.4 - Directory Traversal to Arbitrary File Disclosure Cart66 Lite : < 1.5.4	`CVE-2014-9461`	6.5 Medium	James Hooker	Yes
2014-12-22 00:00	Cart66 Lite :: WordPress Ecommerce <= 1.5.3 - SQL Injection Cart66 Lite : < 1.5.4	`CVE-2014-9442`	8.8 High	James Hooker	Yes
2014-12-03 00:00	Cart66 Lite :: WordPress Ecommerce < 1.5.2 - SQL Injection Cart66 Lite : < 1.5.2	`CVE-2014-9305`	8.8 High	Kacper Szurek	Yes
2014-08-01 00:00	Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Request Forgery Cart66 Lite : < 1.5.1.15	`CVE-2013-5977`	6.3 Medium	absane	Yes
2013-10-11 00:00	Cart66 Lite :: WordPress Ecommerce < 1.5.1.15 - Cross-Site Scripting Cart66 Lite : < 1.5.1.15	`CVE-2013-5978`	6.1 Medium	absane	Yes

Showing 1–6 of 6 reports