Login Request a demo
ZC
Product
Zen Cart
by Zen Cart · last CVE Oct 12, 2026
45
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 1High 4Medium 6Low 0
Severity
All severities45Critical1High4Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Zen Cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-11675
8.8
3%
Jul 27
The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to…
Affected: 1.5.5e
CVE-2024-5762
8.1
72%
Aug 21
Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability
Affected: 1.5.8a
CVE-2026-108826
7.3
0%
Oct 12
Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection
Affected: 2.2.0; 2.2.1; 2.2.2
CVE-2021-3291
7.2
17%
Jan 26
Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command
Affected: 1.5.7b
Showing 4