agentprime: evershopEvery new CVE for evershop.https://agentprime.io/CVE-2026-115323: EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address APIhttps://agentprime.io/advisories/CVE-2026-115323/https://agentprime.io/advisories/CVE-2026-115323/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 10:57:42 GMTCVECVE-2026-72843: EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeoverhttps://agentprime.io/advisories/CVE-2026-72843/https://agentprime.io/advisories/CVE-2026-72843/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 21:57:34 GMTCVEcriticalCVE-2026-28213: EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Responsehttps://agentprime.io/advisories/CVE-2026-28213/https://agentprime.io/advisories/CVE-2026-28213/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Feb 2026 22:31:47 GMTCVEcriticalCVE-2026-25993: EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keyshttps://agentprime.io/advisories/CVE-2026-25993/https://agentprime.io/advisories/CVE-2026-25993/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 17:43:38 GMTCVEcritical