Skip to content
OpenAdvisories

Vendor

FriendsOfShopware

1 known vulnerabilities.

Products

FroshPlatformAdminer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-25878

    FroshAdminer Adminer UI is accessible without admin session

    FroshAdminer is the Adminer plugin for Shopware Platform. Prior to 2.2.1, the Adminer route (/admin/adminer) was accessible without Shopware admin authentication. The route was configured with auth_required=false and performed no session validation, exposing …

    FriendsOfShopware FroshPlatformAdminer frosh/adminer-platform Packagist