CyberSecBulletin

StoreGrowth vulnerabilities

We track 1 vulnerability in StoreGrowth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest StoreGrowth vulnerabilities

  • 7.5 High severity

    StoreGrowth: Missing Authorization

    CVE-2026-78137StoreGrowth

    The StoreGrowth WordPress plugin before 2.1.2 does not validate a browser-supplied product price on two of its unauthenticated actions, allowing unauthenticated attackers to add a product to the cart at an arbitrary, attacker-chosen price that carries through