CoreShop vulnerabilities
4 published CVEs name CoreShop among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-108697
CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction
CoreShop · CoreShop
Medium5.3 - CVE-2026-41249
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
coreshop · CoreShop
High8.2 - CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
coreshop · CoreShop
Medium6.9 - CVE-2026-22242
CoreShop Vulnerable to SQL Injection via Admin Reports
coreshop · CoreShop
Medium4.9