Opencart opencart vulnerabilities
10 published CVEs name Opencart opencart among the affected products.
- 10Published CVEs10 of them scored
- 5Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119558
OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points
OpenCart · OpenCart
Low2.3 - CVE-2026-18412
The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability
OpenCart · OpenCart
Critical9.1 - CVE-2021-47953
OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password
Opencart · OpenCart
Medium5.3 - CVE-2021-47946
OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery
Opencart · OpenCart
Medium6.9 - CVE-2021-47923
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie
Opencart · opencart
Critical9.3 - CVE-2025-1749
HTML injection vulnerability in OpenCart
OpenCart · OpenCart
Medium4.7 - CVE-2025-1748
HTML injection vulnerability in OpenCart
OpenCart · OpenCart
Medium4.7 - CVE-2025-1747
HTML injection vulnerability in OpenCart
OpenCart · OpenCart
Medium4.7 - CVE-2025-1746
Cross-Site Scripting vulnerability in OpenCart
OpenCart · OpenCart
Medium6.1 - CVE-2023-2315
Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2
Opencart · Opencart
High8.1