XSS Vulnerability

  • Resolved Philo22

    (@philo22)


    1 week, 5 days ago

    Patchstack and Wordfence are both reporting CVE-2026-57417 as patched in Cart Lift 3.1.58, but 3.1.58 does not yet appear to be available through WordPress.org, where 3.1.57 is currently the latest version.

    Could you confirm whether 3.1.58 is scheduled for release, and whether users should deactivate Cart Lift until the security update is available?

    Thank you.

Viewing 1 replies (of 1 total)
  • Plugin Support Tamanna

    (@itamannaa)

    1 week, 5 days ago

    Hi @philo22,

    Thank you for bringing this to our attention.

    The security patch was already released in June in Cart Lift 3.1.58. There was a mismatch in the readme file, which was still showing 3.1.57 as the latest version.

    This has now been updated, and Cart Lift 3.1.58 is available. Users can directly download the latest version from the repository.

    We appreciate you taking the time to flag this. If you find everything is working well after the update, a quick 5-star review here would mean a lot to our team.

    Best Regards,
    – Cart Lift Support Team

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.