agentprime: shopperEvery new CVE for shopper.https://agentprime.io/CVE-2026-62991: Shopper: customer detail IDOR exposes administrator and staff recordshttps://agentprime.io/advisories/CVE-2026-62991/https://agentprime.io/advisories/CVE-2026-62991/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 21:07:04 GMTCVECVE-2026-62990: Shopper: same-origin SVG and HTML uploads enable stored XSS and persistent administrator creationhttps://agentprime.io/advisories/CVE-2026-62990/https://agentprime.io/advisories/CVE-2026-62990/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 21:05:51 GMTCVECVE-2026-62989: Shopper: missing variant-delete authorization permits destructive single and bulk actionshttps://agentprime.io/advisories/CVE-2026-62989/https://agentprime.io/advisories/CVE-2026-62989/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 21:03:25 GMTCVECVE-2026-114387: Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Componentshttps://agentprime.io/advisories/CVE-2026-114387/https://agentprime.io/advisories/CVE-2026-114387/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:39:44 GMTCVECVE-2025-31534: WordPress Shopper plugin <= 3.2.5 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2025-31534/https://agentprime.io/advisories/CVE-2025-31534/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Apr 2025 20:58:11 GMTCVEcritical