WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through <= 3.1.57.

Affected Products

Vendor	Product	Versions
rextheme	cart lift	0

References

https://patchstack.com/database/Wordpress/Plugin/cart-lift/vulnerability/wordpress-cart-lift-plugin-3-1-57-cross-site-scripting-xss-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB14d ago

CVE-2026-57417 | Rexme Cart Lift Plugin up to 3.1.57 on WordPress cross site scripting

→ No new info (linked only)

CVSS 3.17.1 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

CISA KEV❌ No

Actively exploited❌ No

CWECWE-79

PublishedJul 13, 2026

Last enriched14d agov2

Trending Score5

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

Version History

Last enriched 14d ago

v2Tier C14d ago

Updated vendor to 'rexme', corrected exploit availability to false, and provided a more detailed description of the vulnerability.

description

via VulDB

v114d ago

Initial creation

WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability

Description

Affected Products

References

Related News (1 articles)

Community Vote

Related CVEs (2)

Pin to Dashboard

Verification

Vulnerability Timeline

Version History