N
Nopcommerce
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 24 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 25, 2019 to present
24
Total CVEs
7
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
32/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
6Medium
16Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
12
2
CSRF
2
3
Path Traversal
2
4
Race Condition
1
5
Malicious File Upload
1
Most Affected Products
1. Nopcommerce NopCommerce33
2. Nopcommerce Store1
Recent Vulnerabilities
See more →CVE-2026-117605
CVSS 5.3medium
nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers
Oct 28, 2026🔧 No Patch
CVE-2025-65589
CVSS 6.1medium
Dec 16, 2025🔧 No Patch
CVE-2025-65591
CVSS 5.4medium
Dec 16, 2025🔧 No Patch
CVE-2025-65592
CVSS 6.1medium
Dec 16, 2025🔧 No Patch
CVE-2025-65590
CVSS 5.4medium
Dec 16, 2025🔧 No Patch
CVE-2025-65593
CVSS 8.8high
Dec 16, 2025🔧 No Patch
CVE-2025-11699
CVSS 7.1high
Dec 1, 2025
CVE-2021-42193
CVSS 6.1medium
Oct 3, 2025🔧 No Patch
CVE-2024-58248
CVSS 3.5low
Apr 16, 2025
CVE-2024-38963
CVSS 6.1medium
Jul 9, 2024🔧 No Patch
Monitor Nopcommerce in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.