Skip to content
OpenAdvisories

Vendor

nivocart

5 known vulnerabilities.

Products

nivocart 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111278

    NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML

    NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML. Attackers can fetch protected forms, extract the captcha_image value…

    nivocart nivocart
  • Medium 5.3
    CVE-2026-94105

    NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller

    NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password recovery by supplying an invalid code parameter. Attackers can send a GET request …

    nivocart nivocart