3083 matches found
PT-2026-106782
Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-ecommerce versions prior to 3.90.0 @payloadcms/plugin-ecommerce versions prior to 4.0.0-canary.34 Description When using the Stripe payment adapter, a Stripe order confirmation can be processed multiple times under certain...
CVE-2021-39476
CVE-2021-39476 Se encontraron múltiples vulnerabilidades XSS en PhoenixCart 1.0.8.0 2x XSS en la misma página "Editar el título de la categoría para SEO:" "Editar la descripción de la categoría" Enlace: https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...
CVE-2026-2631
CVE-2026-2631 Datalogics Ecommerce Delivery – Datalogics PoC / Script de Exploit: CVE-2026-2631.py Autor: Khaled Alenazi Nxploited – Nxploited ZeroDay Hub Contacto: Telegram: @Kxploit 🧬 Resumen de la Vulnerabilidad Plugin: Datalogics Ecommerce Delivery – Datalogics WordPress Versiones Afectadas:...
CVE-2026-105056
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2...
CVE-2026-105056 WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2...
CVE-2026-105056
The impleCode eCommerce Product Catalog plugin for WordPress versions up to and including 3.6.2 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. This vulnerability stems from the improper neutralization of input during web page generation . An attacker could potentially execute maliciou...
EUVD-2026-92317
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2...
CVE-2026-105056 WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2...
WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin eCommerce Product Catalog versions = 3.6.2...
CVE-2026-105056: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XSS.This issue affects eCommerce Product Catalog: from n/a through 3.6.2...
PT-2026-104778
Name of the Vulnerable Software and Affected Versions eCommerce Product Catalog versions prior to 3.6.3 Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a condition where malicious scripts are permanently stored on the target serv...
WordPress ECPay Ecommerce for WooCommerce plugin <= 1.1.2606090 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran The Long in WordPress Plugin ECPay Ecommerce for WooCommerce versions = 1.1.2606090...
CVE-2025-26865
CVE-2025-26865: FreeMarker Server-Side Template Injection via the "ecommerce" plugin in Apache OfBiz Due to a regression between 18.12.17 and 18.12.18 the fix for finding CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz was no longer enforced which reopened the possibilit...
CVE-2026-92551 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Reflected Cross-Site Scripting via ppress_billing_address Filename Parameter
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ppressbillingaddress Filename Parameter in all versions up to, and including, 4.17.4 due to insufficie...
CVE-2026-96344
Custom role PHP Object Injection in eCommerce Product Catalog = 3.6.0 versions...
CVE-2026-96344 WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability
Custom role PHP Object Injection in eCommerce Product Catalog = 3.6.0 versions...
EUVD-2026-89857
Custom role PHP Object Injection in eCommerce Product Catalog = 3.6.0 versions...
CVE-2026-96344
The eCommerce Product Catalog plugin for WordPress (versions