Evershop

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 17
    Known Exploited: 0
    5
    Critical Level Threats
    5
    High Level Threats
    6
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-115323

    EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API

    Last Modified: Oct 29, 2026
    Published: Oct 22, 2026

    CVE-2026-72843

    EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover

    Last Modified: Oct 01, 2026
    Published: Aug 20, 2026

    CVE-2026-28213

    EverShop Vulnerable to Arbitrary Customer Account Takeover via Exposure of Password Reset Token in API Response

    Last Modified: Apr 16, 2026
    Published: Feb 26, 2026

    CVE-2026-25993

    EverShop has a Second-Order SQL Injection in URL Rewrite Processing Derived from Category URL Keys

    Last Modified: Apr 17, 2026
    Published: Feb 10, 2026

    CVE-2025-67419

    A Denial of Service (DoS) vulnerability in evershop 2.1.0 and prior allows unauthenticated attackers to exhaust the application server's resources via the "GET /images" API. The application fails to limit the height of the use-element shadow tree or the dimensions of pattern tiles during the processing of SVG files, resulting in unbounded resource consumption and system-wide denial of service.

    Last Modified: Jan 12, 2026
    Published: Jan 05, 2026
    Items Per Page
    Evershop Vulnerabilities & Security CVEs | CVE-DB