Advisories · Technology

Shopizer.

Every CVE that names Shopizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110771 CVE record

CVSS 5.3 Medium

Shopizer through 3.2.5 Authorization Bypass via Product Review customerId
- Shopizer
- Broken access control
Not analysed yet 14 Oct 2026
CVE-2022-23063 CVE record

CVSS 8.8 High

Shopizer - Insufficient Session Expiration
- Shopizer
- Authentication bypass
Not analysed yet 3 May 2022
CVE-2022-23061 CVE record

CVSS 6.5 Medium

Shopizer - IDOR delete superadmin
- Shopizer
- Broken access control
Not analysed yet 1 May 2022
CVE-2022-23060 CVE record

CVSS 4.8 Medium

Shopizer - Stored XSS in Manage Files
- Shopizer
- Cross-site scripting (XSS)
Not analysed yet 1 May 2022
CVE-2020-11006 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Potential remote code execution in Shopizer
- shopizer
Not analysed yet 8 May 2020