EV
Vendor
evershopcommerce
4
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115323 New | EV evershop evershopcommerce | 7.3 | Oct 22 | EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API |
| CVE-2026-72843 | EV evershop evershopcommerce | 9.8 | Aug 20 | EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover |
| CVE-2026-28213 | EV evershop evershopcommerce | 9.8 | Feb 26 | EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response |
| CVE-2026-25993 | EV evershop evershopcommerce | 9.8 | Feb 10 | EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys |
