Skip to content
OpenAdvisories

Vendor

prodigycommerce

3 known vulnerabilities.

Products

Prodigy Commerce 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-0926 Public exploit

    Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

    The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameters[template_name]' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files…

    prodigycommerce Prodigy Commerce Web / CMS