Evershopcommerce vulnerabilities
Products
- Evershop 5
Newest
- evershopcommerce evershop EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API 6.9 Medium
- evershopcommerce evershop EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover 9.3 Critical
- evershop EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response 9.8 Critical
- evershop EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys 9.3 Critical
- evershop EverShop Order Order.resolvers.js resource injection 6.3 Medium