Login Request a demo
CC
Product
Craft Commerce
by Craftcms · last CVE Mar 11, 2026
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 0High 2Medium 15Low 0
Severity
All severities17Critical0High2Medium15Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Craft Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29177
5.4
0%
Mar 10
Craft Commerce has Stored XSS in Craft Commerce Order Details Slideout
Affected: 4.0.0 before 4.10.2; 5.0.0 before 5.5.3
CVE-2026-29175
5.4
0%
Mar 10
Multiple Stored XSS in Commerce Inventory Page Leading to Session Hijacking
Affected: 5.0.0 before 5.5.3
CVE-2026-25483
5.4
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-31867
4.8
0%
Mar 11
Craft Commerce has a Potential IDOR in Commerce carts
Affected: 4.0.0 before 4.11.0; 5.0.0 before 5.6.0
CVE-2026-29176
4.8
0%
Mar 10
Craft Commerce has Stored XSS in Inventory Location Name
Affected: 5.0.0 before 5.5.3
CVE-2026-29173
4.8
0%
Mar 10
Craft Commerce has Stored XSS while updating Order Status from Orders Table
Affected: 4.0.0 before 4.10.2; 5.0.0 before 5.5.3
CVE-2026-25522
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.0 before 4.10.1; 5.0.0 before 5.5.2
CVE-2026-25490
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-25489
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-25488
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-25487
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-25486
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 5.0.0 before 5.5.2
CVE-2026-25485
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-25484
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
CVE-2026-25482
4.8
0%
Feb 3
Craft Commerce is an ecommerce platform for Craft CMS
Affected: 4.0.1 before 4.10.1; 5.0.0 before 5.5.2; 4.0.0; 4.0.0
Showing 15