Shopper: read-only team permissions allow administrator creation and permission escalation

Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components

Shopper: Multiple data integrity and disclosure issues in admin Livewire components

Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

Shopper: Missing authorization on product removal actions in CollectionProducts component

Shopper: Authorization bypass in multiple Livewire admin components