Skip to contentEc-cube Co.,ltd. vulnerabilities
Newest
- ec-cube co.,ltd. amazonpay plugin (4.0 series), amazonpay v2 plugin (4.0/4.1 series), amazonpay v2 plugin (4.2/4.3 series) +1 more +3 moreExternal control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4...CVE-2026-1036715.3 Medium
- ec-cube, ec-cube co.,ltd. 4.1 series, 4.2 series +1 more +3 moreEC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass...CVE-2026-307776.9 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreAcceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4...CVE-2024-419247.2 High
- ec-cube co.,ltd. web api plugin, web api plugin (4.2 series) +1 moreStored cross-site scripting vulnerability exists in EC-CUBE Web API Plugin. When there are...CVE-2024-411416.1 Medium
- ec-cube, ec-cube co.,ltd. 3 series, 4 series +2 moreEC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2...CVE-2023-468457.2 High
- ec-cube, ec-cube 2, ec-cube co.,ltd. 2 series +2 moreEC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and ...CVE-2023-402814.8 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreCross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2,...CVE-2023-250775.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series +1 moreCross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4...CVE-2023-228385.4 Medium
- ec-cube, ec-cube co.,ltd. 4 series, ec-cube 3 series, and ec-cube 2 series +1 moreCross-site scripting vulnerability in Contents Management of EC-CUBE 4 series (EC-CUBE 4.0.0 to 4...CVE-2023-224385.4 Medium
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE Directory traversal vulnerabilityCVE-2022-401992.7 Low
- ec-cube, ec-cube co.,ltd. 4 series +1 moreEC-CUBE DOM-based cross-site scripting vulnerabilityCVE-2022-389755.4 Medium
- ec-cube product image bulk upload, ec-cube co.,ltd. product image bulk upload plugin +1 moreEC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient...CVE-2022-373469.8 Critical
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE improperly handles HTTP Host header valuesCVE-2022-25355Fix available5.3 Medium
- ec-cube co.,ltd. plugin 'mail magazine management plugin', ec-cube e-mail newsletter management +1 moreCross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management...CVE-2022-211794.3 Medium
- ec-cube, ec-cube co.,ltd. 2 series +1 moreEC-CUBE Cross-site request forgery (CSRF) vulnerabilityCVE-2021-20842Fix available6.5 Medium
- ec-cube, ec-cube co.,ltd. 2 series +1 moreEC-CUBE Improper access control in Management screenCVE-2021-20841Fix available6.5 Medium
- ec-cubeEC-CUBE Improper access control vulnerabilityCVE-2021-20778Fix available7.5 High
- ec-cubeEC-CUBE Cross-site scripting vulnerabilityCVE-2021-20751Fix available6.1 Medium
- ec-cubeEC-CUBE Cross-site scripting vulnerabilityCVE-2021-20750Fix available6.1 Medium
- ec-cube co.,ltd. category contents plugin (for ec-cube 3.0 series), ec-cube business form output +1 moreCross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series)...CVE-2021-207446.1 Medium
- ec-cube email newsletters management, ec-cube co.,ltd. email newsletters management plugin (for ec-cube 3.0 series) +1 moreCross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3...CVE-2021-207436.1 Medium
- ec-cube business form output, ec-cube co.,ltd. business form output plugin (for ec-cube 3.0 series) +1 moreCross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series...CVE-2021-207426.1 Medium
- ec-cubeEC-CUBE Cross-site scripting vulnerabilityCVE-2021-20717Public exploit6.1 Medium
- ec-cubeEC-CUBE Improper input validation vulnerabilityCVE-2020-56807.5 High
- ec-cubeEC-CUBE Improper Restriction of Rendered UI Layers or FramesCVE-2020-56796.1 Medium
- ec-cubeEC-CUBE Directory traversal vulnerabilityCVE-2020-5590Fix available8.1 High
- ec-cubeEC-CUBE Open redirect vulnerabilityCVE-2018-16191Fix available6.1 Medium
- ec-cube co.,ltd. ec-cubeSession fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3...CVE-2018-05648.1 High
- ec-cube co.,ltd. ec-cube, s‑cubism inc. ec-orange +1 moreEC-CUBE vulnerable to authorization bypassCVE-2014-0808Fix available5.0 Medium