UN
Vendor
unopim
8
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102630 | UN unopim unopim | 4.7 | Sep 29 | UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host |
| CVE-2026-85395 | UN unopim unopim | 7.1 | Sep 3 | UnoPim before 2.1.3 Missing Authorization on Integration Management Routes |
| CVE-2026-82524 | UN unopim unopim | 7.2 | Sep 2 | UnoPim File Upload RCE via TinyMCE Image Upload Endpoint |
| CVE-2025-55745 | UN unopim unopim | 8.8 | Aug 22 | UnoPim Quick Export feature is vulnerable to CSV injection |
| CVE-2025-55741 | UN unopim unopim | 8.1 | Aug 22 | unopim/unopim allows unauthorized product deletion via mass-delete endpoint |
| CVE-2025-55744 | UN unopim unopim | 4.3 | Aug 21 | UnoPim vulnerable to CSRF on Product edit feature and creation of other types |
| CVE-2025-55743 | UN unopim unopim | 8.8 | Aug 21 | UnoPim vulnerable to remote code execution through Arbitrary File upload |
| CVE-2025-55742 | UN unopim unopim | 4.8 | Aug 21 | UnoPim Stored XSS via SVG MIME/Sanitizer Bypass |