Opencart vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20254
3. 20266

Newest CVEs

• CVE-2026-119558

  OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

  OpenCart · OpenCart

  Low2.3
• CVE-2026-18412

  The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability

  OpenCart · OpenCart

  Critical9.1
• CVE-2021-47953

  OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password

  Opencart · OpenCart

  Medium5.3
• CVE-2021-47946

  OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery

  Opencart · OpenCart

  Medium6.9
• CVE-2021-47923

  OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie

  Opencart · opencart

  Critical9.3
• CVE-2024-58341

  OpenCart Core 4.0.2.3 SQL Injection via search Parameter

  Opencart · OpenCart Core

  High8.8
• CVE-2025-1749

  HTML injection vulnerability in OpenCart

  OpenCart · OpenCart

  Medium4.7
• CVE-2025-1748

  HTML injection vulnerability in OpenCart

  OpenCart · OpenCart

  Medium4.7
• CVE-2025-1747

  HTML injection vulnerability in OpenCart

  OpenCart · OpenCart

  Medium4.7
• CVE-2025-1746

  Cross-Site Scripting vulnerability in OpenCart

  OpenCart · OpenCart

  Medium6.1