CyberSecBulletin

VirtueMart vulnerabilities

We track 2 vulnerabilities in VirtueMart products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2025.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest VirtueMart vulnerabilities

  • 7.2 High severity

    VirtueMart: Unrestricted Upload of File with Dangerous Type

    CVE-2025-6002VirtueMart

    An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to remote code execution o

  • 8.3 High severity

    VirtueMart: Cross-Site Request Forgery

    CVE-2025-6001VirtueMart

    A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMa