CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping, eCommerce shopping cart - Stored Cross-Site Scripting Vulnerability in 'Address' Date 2021-02-11 Exploit Author Anmol K Sachan Vendor Homepage https://www.peel.fr/ Software Link https://www.peel.fr/nos-offres-1/peel-shopping-31.html...

WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting

WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-site scripting vulnerability. The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute. This can allow an attacker to steal cookie-based authentication credentials an...

CVE-2026-7393-RCE

نظام Pizzafy للتجارة الإلكترونية 1.0 – رفع غير مقيد للملفات في دالة savemenu يؤدي إلى تنفيذ كود عن بُعد التفاصيل الحقل| القيمة ---|--- البائع| SourceCodester رابط البائع| https://www.sourcecodester.com المنتج| نظام Pizzafy للتجارة الإلكترونية باستخدام PHP وMySQL رابط المنتج|...

CVE-2026-7394-SQLI

حقن SQL في نظام التجارة الإلكترونية Pizzafy — admin/vieworder.php التفاصيل الحقل| القيمة ---|--- المورّد| SourceCodester المنتج| نظام التجارة الإلكترونية Pizzafy باستخدام PHP وMySQL الإصدار| 1.0 الثغرة| حقن SQL SQL Injection CWE| CWE-89 درجة CVSSv3| 7.2 عالية متجه الهجوم| الشبكة المصادقة المطلوبة...

SMTP WP Plugin Directory Listing

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. id: CVE-2020-35234 info: name: SMTP WP Plugin Directory Listing author: PR3R00T severity: high description: The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and i...

SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting

A vulnerability was found in SPA-Cart eCommerce CMS 1.9.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search. The manipulation of the argument filterbrandid/filterprice leads to cross site scripting. The attack may be launched remotely...

CVE-2026-105850

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions...

GHSA-8R29-2MP2-PMRW Payload Ecommerce has an order confirmation validation issue

Impact When using the Stripe payment adapter, an order confirmation could be processed more than once under certain conditions. You are affected if: - You use @payloadcms/plugin-ecommerce with the Stripe payment adapter. Deployments that do not use the Stripe payment flow are not affected. Patche...

Payload Ecommerce has an order confirmation validation issue

Impact When using the Stripe payment adapter, an order confirmation could be processed more than once under certain conditions. You are affected if: - You use @payloadcms/plugin-ecommerce with the Stripe payment adapter. Deployments that do not use the Stripe payment flow are not affected. Patche...

CVE-2026-105850 Payload: Order confirmation validation issue in Payload Ecommerce

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions...

CVE-2026-105850 Payload: Order confirmation validation issue in Payload Ecommerce

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions...

CVE-2026-105850 Payload: Order confirmation validation issue in Payload Ecommerce

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions...

EUVD-2026-93493

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions...

CVE-2026-105850

The Payload headless content management system is vulnerable in @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34 . When using the Stripe payment adapter , certain conditions can cause a Stripe order confirmation to be processed more than once. This is...

CVE-2026-32578

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-32578 WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-32578 WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

CVE-2026-32578

The ECPay Ecommerce for WooCommerce plugin for WordPress, version

EUVD-2026-93239

Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce = 1.1.2606090 versions...

PT-2026-106782

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-ecommerce versions prior to 3.90.0 @payloadcms/plugin-ecommerce versions prior to 4.0.0-canary.34 Description When using the Stripe payment adapter, a Stripe order confirmation can be processed multiple times under certain...