Products: 1
Vulnerabilities: 4
Known Exploited: 0
0
Critical Level Threats
2
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-25757
Unauthenticated Spree Commerce users can view completed guest orders by Order ID
Last Modified: Apr 17, 2026
Published: Feb 06, 2026
CVE-2026-25758
Spree allows unauthenticated users can access all guest addresses
Last Modified: Apr 17, 2026
Published: Feb 06, 2026
CVE-2026-22589
Spree API has Unauthenticated IDOR - Guest Address
Last Modified: Apr 18, 2026
Published: Jan 10, 2026
CVE-2026-22588
Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification
Last Modified: Apr 18, 2026
Published: Jan 08, 2026
Items Per Page
