shopware Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by shopware
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
PHP Closure Vulnerability in Shopware E-Commerce Platform
CVE-2026-23498ShopwareShopware7.2HIGHReflected XSS in Shopware Open Commerce Platform
CVE-2025-67648ShopwareShopware7.1HIGHDenial of Service Vulnerability in Shopware Open Commerce Platform
CVE-2025-30151ShopwareShopware7.5HIGHSilencing Deprecation Messages Vulnerability
CVE-2024-42355ShopwareShopware9.8CRITICALInjection Vulnerability in Shopware Open Commerce Platform
CVE-2024-42356ShopwareShopware7.2HIGHSecurity Vulnerability in Shopware API Could Lead to SQL-Injection
CVE-2024-42357ShopwareShopware9.8CRITICALShopware Addresses Security Vulnerability in 404 Pages
CVE-2024-27917ShopwareShopware7.5HIGHBlind SQL-injection in DAL aggregations in Shopware
CVE-2024-22406ShopwareShopware9.3CRITICALServer-Side Request Forgery (SSRF) in Shopware Flow Builder
CVE-2024-22408ShopwareShopware7.6HIGHImproper Control of Generation of Code in Twig Rendered Views in Shopware
CVE-2023-2017Shopware AgShopware 68.8HIGHSwagPayPal payment not sent to PayPal correctly
CVE-2023-23941ShopwareSwagpaypal7.5HIGHImproper Control of Generation of Code in Twig rendered views in shopware
CVE-2023-22731ShopwarePlatform10CRITICALMalfunction of Cross-Site Request Forgery token validation
CVE-2022-24879ShopwareShopware7.5HIGHImproper Access Control in shopware
CVE-2022-24872ShopwarePlatform8.1HIGHServer-Side Request Forgery (SSRF) in Shopware
CVE-2022-24871ShopwarePlatform7.2HIGHCross-Site Scripting via SVG media files
CVE-2021-37710ShopwarePlatform8HIGHAuthenticated server-side request forgery in file upload via URL.
CVE-2021-37711ShopwarePlatform8.8HIGHCommand injection in mail agent settings
CVE-2021-37708ShopwarePlatform8.8HIGHPrivate files publicly accessible with Cloud Storage providers
CVE-2021-32717ShopwarePlatform7.5HIGHLeak of information via Store-API
CVE-2021-32711ShopwarePlatform9.1CRITICALServer-Side Request Forgery Vulnerability in Shopware by Shopware AG
CVE-2020-13970ShopwareShopware8.8HIGHDatabase Password Exposure in Shopware by Shopware
CVE-2020-13997ShopwareShopware7.5HIGHCross-Site Scripting in Shopware Web Application by Shopware
CVE-2019-12935ShopwareShopware7.4HIGHSQL Injection Vulnerability in Shopware by Shopware AG
CVE-2018-20713ShopwareShopware8.8HIGHRemote Code Execution Vulnerability in Shopware by Shopware
CVE-2016-3109ShopwareShopwareEPSS 28%9.8CRITICAL