Where
-Infinity
0

Trending

Last week
Last month
Last year

bagisto/bagistoBagisto has SSTI in parameter that can lead to RCE

Risk 61
Severity
9.8
EPSS
0.10%
First published (updated )
CVE-2026-21450

Bagisto BagistoBagisto has HTML Filter Bypass that Enables Stored XSS

Risk 37
Severity
8.4
EPSS
0.02%
First published (updated )
CVE-2026-21451

pypi/bagistoBagisto has SSTI via first and last name from low-privilege user (not admin)

Risk 56
Severity
8.8
EPSS
0.06%
First published (updated )
CVE-2026-21449

npm/bagistoBagisto has Normal & Blind SSTI from low-privilege user when ordering product

Risk 61
Severity
9.8
EPSS
0.36%
First published (updated )
CVE-2026-21448

laravel/bagistoBagisto has IDOR in Customer Order Reorder Functionality

Risk 35
Severity
7.1
EPSS
0.03%
First published (updated )
CVE-2026-21447
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

npm/bagistoBagisto Missing Authentication on Installer API Endpoints

Risk 61
Severity
9.8
EPSS
0.29%
First published (updated )
CVE-2026-21446

Bagisto BagistoXSS

Risk 62
Severity
8.3
First published (updated )
CVE-2025-60880

composer/bagisto/bagistoInsecure Direct Object Reference (IDOR) in Bagisto v.1.5.0 allows an attacker to obtain sensitive in…

Risk 40
Severity
6.5
First published (updated )
CVE-2023-36238

Webkul BagistoCode Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2023-33570

Webkul BagistoIn Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values (such a…

Risk 79
Severity
8.8
First published (updated )
CVE-2019-16403
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Webkul BagistoCSRF

Risk 80
Severity
8.8
First published (updated )
CVE-2019-14933

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203