| Package | Affected versions | Patched versions |
|---|---|---|
| carts guru | = 1.4.5 |
The Carts Guru plugin 1.4.5 for WordPress allows Insecure Deserialization via a cartsguru-source cookie to classes/wc-cartsguru-event-handler.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free