EUVD-2026-102469

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

EUVD-2026-102531

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an orderid. Attackers can iterate the orderid parameter, which matches guest orders stored with...

CVE-2026-111278

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

CVE-2026-111277

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an orderid. Attackers can iterate the orderid parameter, which matches guest orders stored with...

CVE-2026-111278 NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

CVE-2026-111278 NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

CVE-2026-111278

NivoCart versions through 2.5.1 are vulnerable to a CAPTCHA bypass vulnerability (CWE-804) because the expected CAPTCHA code is disclosed as plain text within the page HTML. This allows unauthenticated attackers to extract the captcha_image value using pattern matching, enabling them to bypass fo...

CVE-2026-111278 NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

CVE-2026-111277

NivoCart versions through 2.5.1 are vulnerable to a missing authorization vulnerability in the download() action of the account/order component. Unauthenticated attackers can exploit this by supplying a specific order_id to retrieve guest order invoices. By iterating the order_id parameter, attac...

CVE-2026-111277 NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an orderid. Attackers can iterate the orderid parameter, which matches guest orders stored with...

CVE-2026-111277 NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an orderid. Attackers can iterate the orderid parameter, which matches guest orders stored with...

CVE-2026-111277 NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an orderid. Attackers can iterate the orderid parameter, which matches guest orders stored with...

CVE-2026-111277: Missing Authorization

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an orderid. Attackers can iterate the orderid parameter, which matches guest orders stored with...

PT-2026-115269

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captcha image value with a pattern match, and submit it t...

PT-2026-115268

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order id. Attackers can iterate the order id parameter, which matches guest orders stored with...

CVE-2026-111278: Guessable CAPTCHA

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captchaimage value with a pattern match, and submit it to...

NivoCart authorization issue vulnerability

NivoCart 2.5.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from a CAPTCHA bypass mechanism. It is expected that CAPTCHAs are printed as plain text in HTML. Unverified attackers can access protected forms, extract the captchaimage value through pattern...

NivoCart authorization issue vulnerability

NivoCart 2.5.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from the lack of authorization in the download operation for accounts/orders. Unauthenticated attackers can obtain guest order invoices by providing the orderid. By traversing the orderid...

CVE-2026-94107

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substrmd5mtrand, 0, 10. Attackers who know an administrator's email address can request a password reset and predict the token to gain administrative...

CVE-2026-94104

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...