Login Request a demo
CU
Product
Cubecart
by Cubecart · last CVE Apr 17, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 4High 5Medium 10Low 1
Severity
All severities29Critical4High5Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cubecart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34018
9.8
0%
Apr 17
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product
Affected: before 6.6.0
CVE-2024-34832
9.8
5%
Jun 6
Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a crafted file uploaded to the _g and node parameters
Affected: before 6.5.5
CVE-2018-20716
9.8
1%
Jan 15
CubeCart before 6.1.13 has SQL Injection via the validate[] parameter of the "I forgot my Password!" feature
Affected: before 6.1.13
CVE-2013-1465
9.8
7%
Feb 8
The Cubecart::_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary PHP objects via a crafted shipping…
Affected: 5.0.0 through 5.2.0
Showing 4