Where
-Infinity
0

Trending

Last week
Last month
Last year

Shopware ShopwareSQL Injection

Risk 51
Severity
7.3
First published (updated )
CVE-2025-27892

Shopware ShopwareShopware allows Denial Of Service via password length

Risk 43
Severity
7.5
First published (updated )
CVE-2025-30151

composer/shopware/coreShopware vulnerable to blind SQL-injection in DAL aggregations

Risk 89
Severity
9.8
First published (updated )
CVE-2024-42357

composer/shopware/coreShopware vulnerable to Server Side Template Injection in Twig using Context functions

Risk 72
Severity
8.3
First published (updated )
CVE-2024-42356

composer/shopware/coreShopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag

Risk 89
Severity
9.8
First published (updated )
CVE-2024-42355
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/shopware/platformShopware vulnerable to Improper Access Control with ManyToMany associations in store-api

Risk 37
Severity
5.9
First published (updated )
CVE-2024-42354

composer/shopware/shopwareXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2022-48150

Shopware SwagPayPalSwagPayPal payment not sent to PayPal correctly

Risk 43
Severity
7.5
First published (updated )
CVE-2023-23941

Shopware ShopwareImproper Output Neutralization in Log Module in shopware

Risk 38
Severity
6.5
First published (updated )
CVE-2023-22733

Shopware ShopwareInsufficient Session Expiration in Administration in shopware

Risk 86
Severity
9.8
First published (updated )
CVE-2023-22732
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Shopware ShopwareImproper Control of Generation of Code in Twig rendered views in shopware

Risk 83
Severity
10
First published (updated )
CVE-2023-22731

Shopware ShopwareImproper Input Validation of Clearance sale in cart

Risk 43
Severity
7.5
First published (updated )
CVE-2023-22730

Shopware ShopwareImproper Input Newsletter subscription option validation in shopware

Risk 43
Severity
7.5
First published (updated )
CVE-2023-22734

Shopware ShopwareAcess control list bypassed via crafted specific URLs

Risk 66
Severity
7.2
First published (updated )
CVE-2022-36102

Shopware ShopwareSensitive data in backend customer module

Risk 34
Severity
5.4
First published (updated )
CVE-2022-36101
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Shopware ShopwarePersistent cross site scripting in customer module in Shopware

Risk 34
Severity
5.4
First published (updated )
CVE-2022-31148

Shopware ShopwareAuthenticated Stored XSS in Shopware Administration

Risk 46
Severity
6.5
First published (updated )
CVE-2022-31057

Shopware ShopwareMultiple valid tokens for password reset in Shopware

Risk 70
Severity
7.5
First published (updated )
CVE-2022-24892

Shopware ShopwareMalfunction of Cross-Site Request Forgery token validation

Risk 43
Severity
7.5
First published (updated )
CVE-2022-24879

Shopware ShopwareNon-Stored Cross-site Scripting in Shopware storefront

Risk 38
Severity
6.1
First published (updated )
CVE-2022-24873
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Shopware ShopwareImproper Access Control in shopware

Risk 60
Severity
8.1
First published (updated )
CVE-2022-24872

Shopware ShopwareServer-Side Request Forgery (SSRF) in Shopware

Risk 66
Severity
7.2
First published (updated )
CVE-2022-24871

Shopware B2b Suite ShopwareSQL Injection

Risk 38
Severity
6.5
First published (updated )
CVE-2022-24956

Shopware ShopwareInsufficient Session Expiration in shopware

Risk 19
Severity
3.5
First published (updated )
CVE-2022-24744

Shopware ShopwareGuest session is shared between customers in shopware

Risk 40
Severity
6.5
First published (updated )
CVE-2022-24745
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Shopware ShopwareHTML injection possibility in voucher code form

Risk 38
Severity
6.1
First published (updated )
CVE-2022-24746

Shopware ShopwareHTTP caching is marking private HTTP headers as public

Risk 37
Severity
6.3
First published (updated )
CVE-2022-24747

Shopware ShopwareIncorrect Authentication in shopware

Risk 43
Severity
7.5
First published (updated )
CVE-2022-24748

Shopware ShopwareInsufficient Session Expiration in shopware

Risk 60
Severity
8.1
First published (updated )
CVE-2022-21652

Shopware ShopwareOpen redirect in shopware

Risk 38
Severity
6.8
First published (updated )
CVE-2022-21651
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203