nivocart

Products

ProductCVEsExploitedLatest
nivocart5–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-111278 Medium 5.3 NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML 0.3%
  • CVE-2026-111277 High 7.5 NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download 0.5%
  • CVE-2026-94107 High 8.1 NivoCart through 2.4.0 Predictable Administrator Password Reset Token 0.6%
  • CVE-2026-94105 Medium 5.3 NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller 0.4%
  • CVE-2026-94104 High 8.8 NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager 0.7%