Login Request a demo
TA
Product
TastyIgniter
by tastyigniter · last CVE Oct 21, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 5Low 0
Severity
All severities8Critical0High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add TastyIgniter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61417
8.8
1%
Oct 20
Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component
Affected: 3.7.7
CVE-2024-44313
8.1
1%
Mar 18
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices…
Affected: 3.7.6
CVE-2026-29001
New
7.2
1%
Oct 21
TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization
Affected: through 4.4.5
CVE-2024-44314
6.5
0%
Mar 18
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses
Affected: 3.7.6
CVE-2022-38256
5.4
1%
Sep 8
TastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload
Affected: through 3.5.0
CVE-2022-0602
5.4
1%
Apr 5
Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0
Affected: before 3.3.0
CVE-2022-23378
5.4
1%
Feb 9
A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter
Affected: 3.2.2
CVE-2021-38699
5.4
8%
Aug 15
TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs
Affected: 3.0.7
Showing 8