CyberSecBulletin

ShopEx vulnerabilities

We track 2 vulnerabilities in ShopEx products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest ShopEx vulnerabilities

  • 7.3 High severity

    ECShop: Improper Neutralization of Special Elements in Output Used by a Downstream Component

    CVE-2026-82922ShopEx

    A security vulnerability has been detected in ShopEx ECShop up to 2.5.1. This vulnerability affects the function flow_update_cart of the file /flow.php?step=update_cart. The manipulation of the argument rec_id leads to sql injection. The attack can be initiate

  • 7.3 High severity

    ECShop: Improper Access Control

    CVE-2026-82921ShopEx

    A weakness has been identified in ShopEx ECShop up to 2.5.1. This affects the function check_img_type of the file admin/pack.php. Executing a manipulation of the argument pack_img can lead to unrestricted upload. It is possible to launch the attack remotely. T