Shopperlabs

11 CVEs across 1 Shopperlabs products. Browse Shopperlabs vulnerabilities, severities, and proof-of-concept exploits.

Shopperlabs products with known CVEs

ProductCVEs
Shopper11
Shopperlabs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-56831Medium6.52026-09-15Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixed_amount discount values, per…
CVE-2026-56830Medium6.52026-09-15Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, an earlier product sub-form hardening change left store() in packages/admin/src/Livewire/Componen…
CVE-2026-56829High8.12026-09-15Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction() without ed…
CVE-2026-56827High8.12026-09-15Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, groupedBulkActions in packages/admin/src/Livewire/Pages/Attribute/Browse.php, packages/admin/src/…
CVE-2026-56825High8.12026-09-15Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Collection/CollectionProducts.php exposes Action::make('de…
CVE-2026-47743High8.72026-07-23Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclos…
CVE-2026-47745Medium6.52026-05-29Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, the admin tables for PaymentMethods, Currencies and Carriers exposed inline toggles and per-recor…
CVE-2026-47744Critical9.92026-05-29Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in the team settings allowed any authenticated panel user to t…
CVE-2026-47742Medium6.52026-05-29Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Sub-form Livewire components used in the product editor (Edit, Inventory, Seo, Shipping, Files) h…
CVE-2026-47741Medium5.92026-05-29Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and increment…
CVE-2026-47740High8.12026-05-29Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, Multiple Filament actions on the admin Order detail and Order shipments table were callable by an…