Login Request a demo
SH
Vendor
shopware
6 products with CVEs on record
94
CVEs
0
On KEV
1
New 30D
Products
SH
shopware
shopware
9.8
77 CVEs0 on KEV1 new
PL
platform
shopware
8.9
11 CVEs0 on KEV0 new
CO
core
shopware
8.9
3 CVEs0 on KEV0 new
BS
B2b Suite
Shopware
6.5
1 CVEs0 on KEV0 new
CO
commercial
shopware
5.3
1 CVEs0 on KEV0 new
SW
Swagpaypal
Shopware
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-104937
SH
Shopware
Shopware
8.1
1%
Oct 13Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting…
CVE-2026-48012
PL
platform
shopware
4.3
0%
Jul 23Shopware SSO referer trust leading to an arbitrary redirect target
CVE-2026-48013
PL
platform
shopware
4.1
0%
Jul 23Shopware: SSRF in Media External-Link Endpoint Bypasses IP Validation
CVE-2026-48009
PL
platform
shopware
6.8
0%
Jul 17Shopware: Admin Account Takeover via User Recovery Hash Exposure
CVE-2026-48014
SH
shopware
shopware
6.5
0%
Jul 17Shopware: Admin API ACL Bypass in Order State Transition Endpoints
CVE-2026-48010
SH
shopware
shopware
6.5
0%
Jul 17Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts
CVE-2026-48016
PL
platform
shopware
4.3
0%
Jul 17Shopware: Unauthorized Payment Trigger for Foreign Orders via /store-api/handle-payment
CVE-2026-48015
SH
shopware
shopware
4.9
0%
Jul 17Shopware: Stored XSS via SVG file upload — no SVG sanitization
CVE-2026-48008
PL
platform
shopware
6.5
0%
Jul 17Shopware: Privilege Escalation via Sync API Integration Admin Flag Bypass
CVE-2026-48011
SH
shopware
shopware
3.7
0%
Jun 10Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames
CVE-2026-32142
CO
commercial
shopware
5.3
0%
Mar 12shopware/commercial: `/api/_info/config` route exposes information about licenses
CVE-2026-31889
PL
platform
shopware
8.9
0%
Mar 11Shopware has a potential take over of app credentials
CVE-2026-31888
PL
platform
shopware
5.3
0%
Mar 11Shopware has user enumeration via distinct error codes on Store API login endpoint
CVE-2026-31887
PL
platform
shopware
7.5
0%
Mar 11Shopware unauthenticated data extraction possible through store-api.order endpoint
CVE-2026-23498
SH
Shopware
Shopware
7.2
0%
Jan 14Shopware is an open commerce platform
CVE-2025-67648
SH
Shopware
Shopware
6.1
0%
Dec 11Shopware is an open commerce platform
CVE-2025-7954
SH
Shopware
Shopware
8.1
0%
Aug 6A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed…
CVE-2025-51541
SH
Shopware
Shopware
6.1
0%
Aug 5A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/
CVE-2025-27892
SH
Shopware
Shopware
6.8
13%
Apr 15Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint
CVE-2025-32378
SH
Shopware
Shopware
5.3
0%
Apr 9Shopware is an open source e-commerce software platform
CVE-2025-30151
SH
Shopware
Shopware
7.5
0%
Apr 8Shopware is an open commerce platform
CVE-2025-30150
SH
Shopware
Shopware
5.3
0%
Apr 8Shopware 6 is an open commerce platform based on Symfony Framework and Vue
CVE-2024-42357
SH
Shopware
Shopware
9.8
1%
Aug 8Shopware is an open commerce platform
CVE-2024-42356
SH
Shopware
Shopware
7.2
1%
Aug 8Shopware is an open commerce platform
CVE-2024-42355
SH
Shopware
Shopware
9.8
1%
Aug 8Shopware, an open ecommerce platform, has a new Twig Tag `sw_silent_feature_call` which silences deprecation messages while triggered in this tag
CVE-2024-42354
SH
Shopware
Shopware
5.9
0%
Aug 8Shopware is an open commerce platform
CVE-2024-31447
SH
Shopware
Shopware
5.3
0%
Apr 8Shopware 6 is an open commerce platform based on Symfony Framework and Vue
CVE-2024-27917
SH
Shopware
Shopware
7.5
1%
Mar 6Shopware is an open commerce platform based on Symfony Framework and Vue
CVE-2024-22408
SH
Shopware
Shopware
8.1
0%
Jan 16Shopware is an open headless commerce platform
CVE-2024-22407
SH
Shopware
Shopware
6.5
0%
Jan 16Shopware is an open headless commerce platform
CVE-2024-22406
SH
Shopware
Shopware
9.8
1%
Jan 16Shopware is an open headless commerce platform
CVE-2023-34099
SH
Shopware
Shopware
5.3
1%
Jun 27Shopware is an open source e-commerce software
CVE-2023-34098
SH
Shopware
Shopware
5.3
1%
Jun 27Shopware is an open source e-commerce software
CVE-2022-48150
SH
Shopware
Shopware
6.1
1%
Apr 21Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI
CVE-2023-2017
SH
Shopware
Shopware
8.8
2%
Apr 17Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositories, allows…
CVE-2023-23941
SW
Swagpaypal
Shopware
7.5
0%
Feb 3SwagPayPal is a PayPal integration for shopware/platform
CVE-2023-22734
SH
Shopware
Shopware
7.5
1%
Jan 17Shopware is an open source commerce platform based on Symfony Framework and Vue js
CVE-2023-22733
SH
Shopware
Shopware
6.5
1%
Jan 17Shopware is an open source commerce platform based on Symfony Framework and Vue js
CVE-2023-22732
SH
Shopware
Shopware
9.8
1%
Jan 17Shopware is an open source commerce platform based on Symfony Framework and Vue js
CVE-2023-22731
SH
Shopware
Shopware
8.8
1%
Jan 17Shopware is an open source commerce platform based on Symfony Framework and Vue js
CVE-2023-22730
SH
Shopware
Shopware
7.5
1%
Jan 17Shopware is an open source commerce platform based on Symfony Framework and Vue js
CVE-2022-36102
SH
Shopware
Shopware
7.2
1%
Sep 12Shopware is an open source e-commerce software
CVE-2022-36101
SH
Shopware
Shopware
5.3
1%
Sep 12Shopware is an open source e-commerce software
CVE-2022-31148
SH
shopware
shopware
5.4
1%
Aug 1Persistent cross site scripting in customer module in Shopware
CVE-2022-31057
SH
Shopware
Shopware
5.4
1%
Jun 27Shopware is an open source e-commerce software made in Germany
CVE-2022-24892
SH
Shopware
Shopware
7.5
1%
Apr 28Shopware is an open source e-commerce software platform
CVE-2022-24879
SH
Shopware
Shopware
7.5
1%
Apr 28Shopware is an open source e-commerce software platform
CVE-2022-24873
SH
Shopware
Shopware
6.1
1%
Apr 28Shopware is an open source e-commerce software platform
CVE-2022-24872
SH
Shopware
Shopware
8.1
1%
Apr 20Shopware is an open commerce platform based on Symfony Framework and Vue
CVE-2022-24871
SH
Shopware
Shopware
5.5
1%
Apr 20Shopware is an open commerce platform based on Symfony Framework and Vue
CVE-2022-24956
BS
B2b Suite
Shopware
6.5
1%
Mar 29An issue was discovered in Shopware B2B-Suite through 4.4.1
CVE-2022-24748
SH
Shopware
Shopware
7.5
1%
Mar 9Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework
CVE-2022-24747
SH
Shopware
Shopware
5.3
1%
Mar 9Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework
CVE-2022-24746
SH
Shopware
Shopware
6.1
1%
Mar 9Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework
CVE-2022-24745
SH
Shopware
Shopware
6.5
1%
Mar 9Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework
CVE-2022-24744
SH
Shopware
Shopware
3.5
0%
Mar 9Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework
CVE-2022-21652
SH
Shopware
Shopware
8.1
1%
Jan 5Shopware is an open source e-commerce software platform
CVE-2022-21651
SH
Shopware
Shopware
6.1
1%
Jan 5Shopware is an open source e-commerce software platform
CVE-2021-41188
SH
Shopware
Shopware
5.4
1%
Oct 26Shopware is open source e-commerce software
CVE-2021-37711
SH
Shopware
Shopware
8.8
1%
Aug 16Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL