CO
Product
commerce
by craftcms · last CVE Sep 14, 2026
21
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 16Low 1
Watch

Add commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32270
1.7
0%
Apr 13
Craft Commerce: Unauthenticated information disclosure in `commerce/payments/pay` can leak some customer order data on anonymous payments
Affected: >= 4.0.0, < 4.11.0; >= 5.0.0, < 5.6.0
Showing 1