OpenCart OpenCart

• CVE-2026-119558 Low 3.1 OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points 0.2%
• CVE-2026-18412 Critical 9.1 The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability 0.5%
• CVE-2021-47953 Medium 4.3 OpenCart 3.0.3.7 Cross-Site Request Forgery via account/password 0.1%
• CVE-2021-47946 Medium 5.3 OpenCart 3.0.3.6 Account Takeover via Cross Site Request Forgery 0.2%
• CVE-2021-47923 Critical 9.8 OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie 0.4%
• CVE-2025-1749 Medium 4.7 HTML injection vulnerability in OpenCart 0.3%
• CVE-2025-1748 Medium 4.7 HTML injection vulnerability in OpenCart 0.3%
• CVE-2025-1747 Medium 4.7 HTML injection vulnerability in OpenCart 0.3%
• CVE-2025-1746 Medium 6.1 Cross-Site Scripting vulnerability in OpenCart 0.2%
• CVE-2023-2315 High 8.1 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 1.0%