Skip to content
OpenAdvisories

Product · nopSolutions

nopCommerce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-117605

    nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers

    nopCommerce before 5.00.0 contains a missing authorization vulnerability in the admin ProductController RelatedProductAddPopup, CrossSellProductAddPopup and AssociatedProductAddPopup handlers that fail to verify parent product ownership. Authenticated vendors…

    nopSolutions nopCommerce