Skip to content
OpenAdvisories

Vendor

OpenCart

11 known vulnerabilities.

Products

OpenCart 10 OpenCart Core 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-119558

    OpenCart through 4.1.0.4 Payment Bypass via Free Checkout Reward Points

    OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid full-price orders by clearing reward points after selecting Free Checkout. Attackers can apply points, save Free Checkout, then submit zero points…

    OpenCart OpenCart