Skip to content
OpenAdvisories

Product · evershopcommerce

evershop

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-115323

    EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API

    EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unauthenticated attackers to manage other customers' addresses. Attackers who know customer and address UUIDs can send POST, PATCH, or DELETE re…

    evershopcommerce evershop