Exploited: 178
LatestCVE-2026-115731 — Report Deserialization Code Execution
VulnFeed.org
AREN

shopperlabs shopper vulnerabilities and fixes

Exploited and high-severity shopperlabs shopper vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.1CVE-2026-62989Shopper: missing variant-delete authorization permits destructive single and bulk actionsVerify fixshopperlabs shopper
    1 min read
  2. 8.7CVE-2026-62990Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creationVerify fixshopperlabs shopper
    2 min read
  3. 8.8CVE-2026-56828Shopper: read-only team permissions allow administrator creation and permission escalationVerify fixshopperlabs shopper
    1 min read
Esc