EUVD-2026-79299

An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfilment components...

CVE-2026-79409

An issue in Webkul Bagisto 2.4.9 allows a remote attacker to obtain sensitive information via the add-to-cart API and the downloadable fulfilment components...

CVE-2026-79409

Webkul Bagisto 2.4.9 is affected by a sensitive information disclosure vulnerability in its add-to-cart API and downloadable fulfilment components . A remote attacker with low privileges can exploit this to obtain sensitive data, resulting in a high confidentiality impact with no integrity or ava...