Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
ec-cube/ec-cube
Composer
· Package
16 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
EC-CUBE DOM-based cross-site scripting vulnerability
CVE-2022-38975 · GHSA-PGGW-RQFM-72RH
ec-cube/ec-cube
Composer
Medium
No fix reported
2026-09-10
EC-CUBE Directory traversal vulnerability
CVE-2022-40199 · GHSA-WJPV-FRF2-3R58
ec-cube/ec-cube
Composer
Low
No fix reported
2026-09-10
EC-CUBE improperly handles HTTP Host header values
CVE-2022-25355 · GHSA-PW97-6V74-9W3P
ec-cube/ec-cube
Composer
Medium
Fix reported
2026-09-10
EC-CUBE has a Vulnerability that Allows MFA Bypass in the Administrative Interface
GHSA-7RHV-H82H-VPJH
ec-cube/ec-cube
Composer
Medium
No fix reported
2026-03-06
EC-CUBE Open redirect vulnerability
CVE-2018-16191 · GHSA-FCGG-QGXG-2G2X
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-09-13
EC-CUBE vulnerable to authorization bypass
CVE-2014-0808 · GHSA-J2HG-W4P4-6RVM
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-06-11
EC-CUBE Improper access control in Management screen
CVE-2021-20841 · GHSA-JC55-CRG7-PR35
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-04-26
EC-CUBE Cross-site request forgery (CSRF) vulnerability
CVE-2021-20842 · GHSA-M9HV-QMQH-33QH
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-04-26
EC-CUBE Cross-site scripting vulnerability
CVE-2021-20751 · GHSA-R6QQ-QC9M-98W2
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-04-26
EC-CUBE Cross-site scripting vulnerability
CVE-2021-20750 · GHSA-VRPV-26FM-7VF7
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-04-26
EC-CUBE Cross-site scripting vulnerability
CVE-2021-20717 · GHSA-C8MX-43CQ-993W
ec-cube/ec-cube
Composer
Medium
No fix reported
2024-04-26
EC-CUBE Improper input validation vulnerability
CVE-2020-5680 · GHSA-6WM9-966M-73JR
ec-cube/ec-cube
Composer
High
No fix reported
2024-04-26
EC-CUBE Improper Restriction of Rendered UI Layers or Frames
CVE-2020-5679 · GHSA-RWH8-H525-4JVJ
ec-cube/ec-cube
Composer
Medium
No fix reported
2024-04-26
EC-CUBE Directory traversal vulnerability
CVE-2020-5590 · GHSA-HX79-X87C-HGM3
ec-cube/ec-cube
Composer
High
Fix reported
2024-04-26
EC-CUBE Improper access control vulnerability
CVE-2021-20778 · GHSA-4CXM-8HH5-JJ33
ec-cube/ec-cube
Composer
High
Fix reported
2024-04-26
EC-CUBE XSS Vulnerabilities
CVE-2011-0451 · GHSA-WGVV-5396-GGVJ
ec-cube/ec-cube
Composer
Medium
Fix reported
2024-01-16
