Read the docs

CE-PhoenixCart

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CE-PhoenixCart records in CISA KEV

No CE-PhoenixCart vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-29802 CVE-2025-47272

PhoenixCart Vulnerable to Account Deletion Without Password Confirmation

Priority MEDIUM 58

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2025-06-02 Fixed in 1.1.0.3 CWE-306
Open these records in search →