CO
Product
commerce
21
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 16Low 1
Watch
Add commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29174 | 8.8 | Mar 10 | Craft Commerce has a SQL Injection in Commerce Inventory Table Sorting Affected: >= 5.0.0 < 5.5.3 |
| CVE-2026-29172 | 8.8 | Mar 10 | Craft Commerce has a SQL Injection in Commerce Purchasables Table Sorting Affected: >= 4.0.0 < 4.10.2; >= 5.0.0 < 5.5.3 |
| CVE-2026-32272 | 8.7 | Apr 13 | Craft Commerce: Blind SQL Injection via hasVariant/hasProduct Affected: >= 5.0.0 < 5.6.0 |
| CVE-2026-32271 | 7.7 | Apr 13 | Craft Commerce: SQL Injection can lead to Remote Code Execution via TotalRevenue Widget Affected: >= 4.0.0, < 4.10.3; >= 5.0.0, < 5.5.5 |
Showing 4