Skip to content
Nnivocart
Products
| Product | CVEs | Exploited | Latest |
| nivocart | 5 | – | Oct 15, 2026 |
Exploited and recent CVEs
-
CVE-2026-111278
Medium 5.3
NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML
0.3%
-
CVE-2026-111277
High 7.5
NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download
0.5%
-
CVE-2026-94107
High 8.1
NivoCart through 2.4.0 Predictable Administrator Password Reset Token
0.6%
-
CVE-2026-94105
Medium 5.3
NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller
0.4%
-
CVE-2026-94104
High 8.8
NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager
0.7%