CVE-2026-96600

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend users with Isotope module permissions can exploit...

EUVD-2026-85341

Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers and administrator-supplied values directly into SQL statements. Authenticated Contao backend users with Isotope module permissions can exploit...

CVE-2026-96600

Isotope eCommerce versions through 2.9.10 are vulnerable to a blind SQL injection within backend callbacks. The root cause is the direct interpolation of request-controlled identifiers and administrator-supplied values into SQL statements. This flaw allows authenticated Contao backend users with ...

CVE-2026-96599

Versions of Isotope eCommerce through 2.9.10 are vulnerable to an identifier prediction flaw. The application uses the uniqid() function rather than a cryptographically secure source to generate order identifiers. Because guest orders lack proper ownership verification, an unauthenticated attacke...

EUVD-2026-85340

Isotope eCommerce through 2.9.10 derives order identifiers from uniqid instead of a cryptographically secure source, allowing unauthenticated attackers to guess identifiers. Guest orders lack ownership verification, enabling attackers to access order details including billing address, customer...

Malicious code in isotope_6am4g_corpc_phoenix (npm)

The package isotope6am4gcorpcphoenix was found to contain malicious code...

MAL-2025-23439 Malicious code in isotope-dev (npm)

The package isotope-dev was found to contain malicious code...

MAL-2025-23446 Malicious code in isotope_n82ie_zixw6_serenade (npm)

The package isotopen82iezixw6serenade was found to contain malicious code...

Malicious code in isotope-dev (npm)

The package isotope-dev was found to contain malicious code...

Malicious code in isotope-webhooks (npm)

The package isotope-webhooks was found to contain malicious code...

MAL-2025-23444 Malicious code in isotope_lznzo_g55ay_zenith (npm)

The package isotopelznzog55ayzenith was found to contain malicious code...

MAL-2025-23440 Malicious code in isotope-webhooks (npm)

The package isotope-webhooks was found to contain malicious code...

CVE-2024-36681

SQL Injection vulnerability in the module "Isotope" pkisotope =1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensitive information and cause other impacts via pkisotope::saveData and pkisotope::removeData methods...

CVE-2024-36681

SQL Injection vulnerability in the module "Isotope" pkisotope =1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensitive information and cause other impacts via pkisotope::saveData and pkisotope::removeData methods...

CVE-2024-36681

SQL Injection vulnerability in the module "Isotope" pkisotope =1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensitive information and cause other impacts via pkisotope::saveData and pkisotope::removeData methods...

CVE-2024-36681

SQL Injection vulnerability in the module "Isotope" pkisotope =1.7.3 from Promokit.eu for PrestaShop allows attackers to obtain sensitive information and cause other impacts via pkisotope::saveData and pkisotope::removeData methods...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop pkisotope version 1.7.3 and prior versions, which originates from...

CVE-2024-36681

The Isotope (pk_isotope) module by Promokit.eu for PrestaShop is vulnerable to SQL Injection in versions

PT-2024-27125 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop module "Isotope" pk isotope versions =1.7.3 Description: The issue allows attackers to obtain sensitive information and cause other impacts via the pk isotope::saveData and pk isotope::removeData methods. Recommendations: For...