Products: 2
Vulnerabilities: 13
Known Exploited: 0
3
Critical Level Threats
3
High Level Threats
7
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-25757
Unauthenticated Spree Commerce users can view completed guest orders by Order ID
Last Modified: Apr 17, 2026
Published: Feb 06, 2026
CVE-2026-25758
Spree allows unauthenticated users can access all guest addresses
Last Modified: Apr 17, 2026
Published: Feb 06, 2026
CVE-2026-22589
Spree API has Unauthenticated IDOR - Guest Address
Last Modified: Apr 18, 2026
Published: Jan 10, 2026
CVE-2026-22588
Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification
Last Modified: Apr 18, 2026
Published: Jan 08, 2026
CVE-2011-10026
Spreecommerce < 0.50.x API RCE
Last Modified: Apr 07, 2026
Published: Aug 20, 2025
Items Per Page
