CC
Product
Craft Commerce
by Craftcms · last CVE Mar 11, 2026
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 15Low 0
Watch

Add Craft Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29174
8.8
0%
Mar 10
Craft Commerce has a SQL Injection in Commerce Inventory Table Sorting
Affected: 5.0.0 before 5.5.3
CVE-2026-29172
8.8
0%
Mar 10
Craft Commerce has a SQL Injection in Commerce Purchasables Table Sorting
Affected: 4.0.0 before 4.10.2; 5.0.0 before 5.5.3
Showing 2