ET
Product
Ecommerce Template
4
CVEs
0
On KEV
8.2
Max CVSS
3
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Ecommerce Template to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-90896 | 8.2 | Sep 14 | Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII Affected: before 91e273c |
| CVE-2026-115453 New | 7.1 | Oct 22 | Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries Affected: b139a11c7bfab82b9c54c738b9a5d6015b439972 before adf7dedbb41894c0bad0b33a26999b0da7e967b7 |
| CVE-2026-115450 New | 7.1 | Oct 22 | Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier Affected: 2aa8ec539b6b441632096ced78e099fb096a57da before e6b364cd668f2ba875cfa7f6d55c63e771715df7 |
| CVE-2026-91154 | 6.9 | Sep 28 | Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service Affected: before ec97209 |
Showing 4