MMarcosCamara01

Products

Exploited and recent CVEs

• CVE-2026-115453 High 7.1 Cross user deletion and modification of cart and wishlist rows in Ecommerce Template through unscoped primary key queries 0.2%
• CVE-2026-115450 High 7.1 Price manipulation in the Ecommerce Template checkout flow through a client supplied Stripe price identifier 0.2%
• CVE-2026-91154 Medium 6.9 Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service 0.4%
• CVE-2026-90896 High 8.2 Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII 0.7%