Advisories · Technology

EC-CUBE CO.,LTD. AmazonPay Plugin (4.0 series).

Every CVE that names EC-CUBE CO.,LTD. AmazonPay Plugin (4.0 series) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-103671 CVE record

CVSS 5.3 Medium

External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".
- EC-CUBE CO.,LTD. AmazonPay V2 Plugin (4.0/4.1 series)
- EC-CUBE CO.,LTD. AmazonPay V2 Plugin (4.2/4.3 series, Bundle Edition)
- CWE-472
Not analysed yet 14 Oct 2026