CoreShop vulnerabilities
4 published CVEs name CoreShop among the affected products.
- Published CVEs
- 4
- Last 12 months
- 4
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 3Low 0Not scored 0
Newest CVEs
- CVE-2026-108697
CoreShop through 2026.2.2 Missing Authorization via ResourceController listAction
CoreShop · CoreShop
Medium5.3 - CVE-2026-41249
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
coreshop · CoreShop
High8.2 - CVE-2026-23959
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
coreshop · CoreShop
Medium6.9 - CVE-2026-22242
CoreShop Vulnerable to SQL Injection via Admin Reports
coreshop · CoreShop
Medium4.9