S
Vendor security profile
shopperlabs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV0
Public exploit4
Patch rate%100
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
5
1
CVE KEV
CVE severity distribution
6toplam CVE
High3 (50%)
Medium3 (50%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%67
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
5.4
CVE-2026-56826
Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration
S
Patch verified
6.5
CVE-2026-56830
Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorization
S
Patch verifiedEPSS %0
6.5
CVE-2026-56831
Shopper: Negative discount values accepted and propagated through order calculation pipeline
S
Patch verifiedEPSS %0
8.1
CVE-2026-56827
Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers
S
Patch verifiedEPSS %1
8.1
CVE-2026-56829
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
S
Patch verifiedEPSS %1
8.1
CVE-2026-56825
Shopper: Missing authorization on product removal actions in CollectionProducts component
S
Patch verifiedEPSS %1