BeikeShop vulnerabilities

3 known vulnerabilities in BeikeShop from Chengdu Everbrite Network Technology. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  BeikeShop: Incorrect Privilege Assignment

  CVE-2026-11462Jun 7, 2026Chengdu Everbrite Network Technology

  A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function callback of the file plugins/Stripe/Controllers/StripeController.php of the component Stripe Plugin. Performing a manipulation of the argument

• 8.8 High severity

  BeikeShop: Improper Access Control

  CVE-2024-8164Aug 26, 2024Chengdu Everbrite Network Technology

  A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload.

• 8.1 High severity

  BeikeShop: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-8163Aug 26, 2024Chengdu Everbrite Network Technology

  A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible