Skip to content
OpenAdvisories

Vendor

VirtueMart

3 known vulnerabilities.

Products

VirtueMart 2 Cart 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-6002 Public exploit

    VirtueMart - Unrestricted File Upload

    An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to remote code execution …

    VirtueMart VirtueMart
  • High 8.3
    CVE-2025-6001

    VirtueMart - Cross Site Request Forgery (CSRF)

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueM…

    VirtueMart VirtueMart