S
Vendor security profile
shopperlabs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit4
Patch rate%100
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
5
0
CVE KEV
CVE severity distribution
5toplam CVE
High3 (60%)
Medium2 (40%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%80
Public exploit
5Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
6.5
CVE-2026-56830
Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorization
S
Patch verifiedEPSS %0
6.5
CVE-2026-56831
Shopper: Negative discount values accepted and propagated through order calculation pipeline
S
Patch verifiedEPSS %0
8.1
CVE-2026-56827
Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers
S
Patch verifiedEPSS %1
8.1
CVE-2026-56829
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
S
Patch verifiedEPSS %1
8.1
CVE-2026-56825
Shopper: Missing authorization on product removal actions in CollectionProducts component
S
Patch verifiedEPSS %1