Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9Shopware is an open commerce platform.Check if you run itEPSS 0.25%Mar 11, 2026
- Medium6.9FroshAdminer is the Adminer plugin for Shopware Platform.Check this weekEPSS 41.00%Feb 9, 2026
- High7.2Shopware is an open commerce platform.Check if you run itEPSS 0.44%Jan 14, 2026
- High7.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 10, 2025
- Medium6.0A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usageCheck if you run itEPSS 0.39%Aug 6, 2025
- Medium6.1A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/.Check if you run itEPSS 0.41%Aug 5, 2025
- Medium6.8Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint.Check this weekEPSS 12.93%Apr 15, 2025
- High8.8Server-side Template Injection (SSTI) in Shopware 6 (<= v6.4.20.0, v6.5.0.0-rc1 <= v6.5.0.0-rc4), affecting both shopware/core and shopware/platform GitHub repositorie…Check if you run itEPSS 2.07%Apr 17, 2023
Sort