Advisories · Technology

likeshop.

Every CVE that names likeshop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111348 CVE record

CVSS 5.3 Medium

Likeshop through 3.5.1 IDOR via AfterSale API Refund Endpoints
- likeshop
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-65707 CVE record

CVSS 8.5 High

Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint
- likeshop
- SQL injection
Not analysed yet 24 Jul 2026
CVE-2024-5766 CVE record

CVSS 5.1 Medium

Likeshop Merchandise admin cross site scripting
- Likeshop
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2024
CVE-2024-0352 CVE record

CVSS 7.3 HighCritical · CVSS 7+ and EPSS

Likeshop HTTP POST Request File.php userFormImage unrestricted upload
- Likeshop
- Unrestricted file upload
Not analysed yet 9 Jan 2024