Advisories · Technology

SourceCodester Pizzafy Ecommerce System.

Every CVE that names SourceCodester Pizzafy Ecommerce System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-16226 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload
- SourceCodester Pizzafy Ecommerce System
- Broken access control
- Unrestricted file upload
Not analysed yet 19 Jul 2026
CVE-2026-10559 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System index.php file inclusion
- SourceCodester Pizzafy Ecommerce System
- Path traversal
Not analysed yet 2 Jun 2026
CVE-2026-10558 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System index.php file inclusion
- SourceCodester Pizzafy Ecommerce System
- Path traversal
Not analysed yet 2 Jun 2026
CVE-2026-8117 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System index.php cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 7 May 2026
CVE-2026-7410 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 29 Apr 2026
CVE-2026-7409 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 29 Apr 2026
CVE-2026-7408 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 29 Apr 2026
CVE-2026-7407 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 29 Apr 2026
CVE-2026-7394 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 29 Apr 2026
CVE-2026-7393 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload
- SourceCodester Pizzafy Ecommerce System
- Broken access control
- Unrestricted file upload
Not analysed yet 29 Apr 2026
CVE-2026-7297 CVE record

CVSS 4.8 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 28 Apr 2026
CVE-2026-7296 CVE record

CVSS 4.8 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 28 Apr 2026
CVE-2026-7295 CVE record

CVSS 4.8 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 28 Apr 2026
CVE-2026-7294 CVE record

CVSS 4.8 Medium

SourceCodester Pizzafy Ecommerce System index.php save_settings cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 28 Apr 2026
CVE-2026-7293 CVE record

CVSS 5.1 Medium

SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7268 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7267 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System view_prod.php sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7266 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7265 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System index.php category sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7264 CVE record

CVSS 5.3 Medium

SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7228 CVE record

CVSS 6.9 Medium

SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7227 CVE record

CVSS 6.9 Medium

SourceCodester Pizzafy Ecommerce System ajax.php login sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7226 CVE record

CVSS 6.9 Medium

SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7225 CVE record

CVSS 6.9 Medium

SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026
CVE-2026-7224 CVE record

CVSS 6.9 Medium

SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection
- SourceCodester Pizzafy Ecommerce System
- Other injection
- SQL injection
Not analysed yet 28 Apr 2026