BA
Product
Bagisto
by Webkul · last CVE Sep 28, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 10Medium 19Low 4
Watch

Add Bagisto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-19835
3.8
0%
Aug 14
Webkul Bagisto Customer Item Deletion Endpoint access control
Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4
CVE-2026-19995
3.5
0%
Aug 17
Webkul Bagisto RMA Message send-message cross site scripting
Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4
CVE-2026-101139
2.7
0%
Sep 28
Webkul Bagisto Invoice Mass Status Update state authorization
Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; +5 more
CVE-2026-19837
2.7
0%
Aug 14
Webkul Bagisto Customer Search search information disclosure
Affected: 2.4.0; 2.4.1; 2.4.2; 2.4.3; 2.4.4
Showing 4