CVE-2026-118542

Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing. This issue affects Commerce Core versions: from 0.0.0 to 2.41.0, from 3.0.0 to 3.3.13...

DRUPAL-CONTRIB-2026-257

This module enables you to sell goods and services to customers through a shopping cart and checkout form. Sites can also create multiple online stores that are managed by different users. The module doesn't check access properly when a store is saved. A user who can either create stores or edit...

Commerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257

This module enables you to sell goods and services to customers through a shopping cart and checkout form. Sites can also create multiple online stores that are managed by different users. The module doesn't check access properly when a store is saved. A user who can either create stores or edit...

PT-2026-130572

This module enables you to sell goods and services to customers through a shopping cart and checkout form. Sites can also create multiple online stores that are managed by different users. The module doesn't check access properly when a store is saved. A user who can either create stores or edit...

FAQ: Can the Store Name be Renamed on StoreFront?

Q: Can the store name be renamed on StoreFront? A : Renaming the StoreFront Store name is not supported. To workaround this issue create a new Store. Note : It is also not recommended to delete the Default Store.There have been issues reported with authentication when the default store is deleted...