Shopizer records
14 published records for vendor shopizer.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 35.7%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-346 Origin Validation Error1
- CWE-189 Numeric Errors1
- CWE-613 Insufficient Session Expiration1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2022-23063No exploit | Shopizer - Insufficient Session Expirationshopizer · shopizer · CWE-613 | High8.8 | — | 1.2% | May 3, 2022 |
32Monitor | CVE-2025-51605No exploit | An issue was discovered in Shopizer 3.2.7.shopizer · shopizer · CWE-346 | High8.1 | — | 0.2% | Aug 22, 2025 |
28Monitor | CVE-2014-4963Proof of concept | Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter tshopizer · shopizer | Medium6.8 | — | 3.7% | Jul 15, 2014 |
28Monitor | CVE-2014-4964Proof of concept | Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authenticationshopizer · shopizer · CWE-352 | Medium6.8 | — | 2.3% | Jul 15, 2014 |
26Monitor | CVE-2014-4962Proof of concept | Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuantshopizer · shopizer · CWE-189 | Medium6.4 | — | 4.7% | Jul 15, 2014 |
26Monitor | CVE-2022-23061No exploit | Shopizer - IDOR delete superadminshopizer · shopizer · CWE-639 | Medium6.5 | — | 1.1% | May 1, 2022 |
26Monitor | CVE-2020-11007No exploit | Negative charge in shopping cart possible in Shopizershopizer · shopizer · CWE-20 | Medium6.5 | — | 0.8% | Apr 16, 2020 |
21Monitor | CVE-2020-11006No exploit | Potential remote code execution in Shopizershopizer · shopizer · CWE-79 | Medium5.4 | — | 0.6% | May 8, 2020 |
20Monitor | CVE-2021-33562Proof of concept | A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTMshopizer · shopizer · CWE-79 | Medium4.8 | — | 2.9% | May 24, 2021 |
20Monitor | CVE-2021-33561Proof of concept | A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML vshopizer · shopizer · CWE-79 | Medium4.8 | — | 2.8% | May 24, 2021 |
20Monitor | CVE-2014-5385No exploit | com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, wshopizer · shopizer · CWE-287 | Medium5.0 | — | 1.1% | Aug 21, 2014 |
19Monitor | CVE-2022-23059No exploit | Shopizer - Stored XSS in Manage Imagesshopizer · shopizer · CWE-79 | Medium4.8 | — | 0.6% | Mar 29, 2022 |
19Monitor | CVE-2022-23060No exploit | Shopizer - Stored XSS in Manage Filesshopizer · shopizer · CWE-79 | Medium4.8 | — | 0.6% | May 1, 2022 |
18Monitor | CVE-2014-4965Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbitrary web script or Hshopizer · shopizer · CWE-79 | Medium4.3 | — | 3.2% | Jul 15, 2014 |
- CVE-2022-2306335Monitor
Shopizer - Insufficient Session Expiration
HighCVSS 8.8No exploitEPSS 1%shopizer · shopizerMay 3, 2022
- CVE-2025-5160532Monitor
An issue was discovered in Shopizer 3.2.7.
HighCVSS 8.1No exploitEPSS 0%shopizer · shopizerAug 22, 2025
- CVE-2014-496328Monitor
Shopizer 1.1.5 and earlier allows remote attackers to modify the account settings of arbitrary users via the customer.customerId parameter t
MediumCVSS 6.8Proof of conceptEPSS 3%shopizer · shopizerJul 15, 2014
- CVE-2014-496428Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to hijack the authentication
MediumCVSS 6.8Proof of conceptEPSS 2%shopizer · shopizerJul 15, 2014
- CVE-2014-496226Monitor
Shopizer 1.1.5 and earlier allows remote attackers to reduce the total cost of their shopping cart via a negative number in the productQuant
MediumCVSS 6.4Proof of conceptEPSS 4%shopizer · shopizerJul 15, 2014
- CVE-2022-2306126Monitor
Shopizer - IDOR delete superadmin
MediumCVSS 6.5No exploitEPSS 1%shopizer · shopizerMay 1, 2022
- CVE-2020-1100726Monitor
Negative charge in shopping cart possible in Shopizer
MediumCVSS 6.5No exploitEPSS 0%shopizer · shopizerApr 16, 2020
- CVE-2020-1100621Monitor
Potential remote code execution in Shopizer
MediumCVSS 5.4No exploitEPSS 0%shopizer · shopizerMay 8, 2020
- CVE-2021-3356220Monitor
A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTM
MediumCVSS 4.8Proof of conceptEPSS 2%shopizer · shopizerMay 24, 2021
- CVE-2021-3356120Monitor
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML v
MediumCVSS 4.8Proof of conceptEPSS 2%shopizer · shopizerMay 24, 2021
- CVE-2014-538520Monitor
com/salesmanager/central/profile/ProfileAction.java in Shopizer 1.1.5 and earlier does not restrict the number of authentication attempts, w
MediumCVSS 5.0No exploitEPSS 1%shopizer · shopizerAug 21, 2014
- CVE-2022-2305919Monitor
Shopizer - Stored XSS in Manage Images
MediumCVSS 4.8No exploitEPSS 0%shopizer · shopizerMar 29, 2022
- CVE-2022-2306019Monitor
Shopizer - Stored XSS in Manage Files
MediumCVSS 4.8No exploitEPSS 0%shopizer · shopizerMay 1, 2022
- CVE-2014-496518Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier allow remote attackers to inject arbitrary web script or H
MediumCVSS 4.3Proof of conceptEPSS 3%shopizer · shopizerJul 15, 2014