evershopcommerce vulnerabilities
4 published CVEs name evershopcommerce among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 3Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115323
EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API
evershopcommerce · evershop
Medium6.9 - CVE-2026-72843
EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
evershopcommerce · evershop
Critical9.3 - CVE-2026-28213
EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response
evershopcommerce · evershop
Critical9.8 - CVE-2026-25993
EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys
evershopcommerce · evershop
Critical9.3