EV
Vendor
evershopcommerce
1 product with CVEs on record
4
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115323
New
EV
evershop
evershopcommerce
7.3
0%
Oct 22EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API
CVE-2026-72843
EV
evershop
evershopcommerce
9.8
1%
Aug 20EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
CVE-2026-28213
EV
evershop
evershopcommerce
9.8
0%
Feb 26EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response
CVE-2026-25993
EV
evershop
evershopcommerce
9.8
0%
Feb 10EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys