Skip to content
OpenAdvisories

Vendor

nopSolutions

2 known vulnerabilities.

Products

nopCommerce 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-117605

    nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers

    nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent product ownership. Authenticated vendors…

    nopSolutions nopCommerce