Tastyigniter vulnerabilities
We track 3 vulnerabilities in Tastyigniter products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Tastyigniter vulnerabilities
- 7.2 High severity
TastyIgniter: Deserialization of Untrusted Data
TastyIgniter through 4.4.5 contains a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized and later unserialized
- 8.8 High severity
Tastyigniter: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their brows
- 8.1 High severity
Tastyigniter: Improper Access Control
TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.