Skip to content
OpenAdvisories

Vendor

evershopcommerce

4 known vulnerabilities.

Products

evershop 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-115323

    EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API

    EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unauthenticated attackers to manage other customers' addresses. Attackers who know customer and address UUIDs can send POST, PATCH, or DELETE re…

    evershopcommerce evershop