Read the docs

MarcosCamara01

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MarcosCamara01 records in CISA KEV

No MarcosCamara01 vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-61910 CVE-2026-91154 · GHSA-v9ch-cf39-43vr

Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Priority LOW 37

Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.ts, revalidateProducts) in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote,…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00394 Published 2026-09-28 Fixed in ec97209 CWE-306
TI-2026-61768 CVE-2026-90896 · GHSA-qfqr-55gf-4v3j

Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII

Priority LOW 37

Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts), exposed at GET /api/stripe/checkout_sessions, in MarcosCamara01 Ecommerce Tem…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00713 Published 2026-09-14 Fixed in 91e273c CWE-306
TI-2026-79306 CVE-2026-115453 · GHSA-j5qr-vh53-fq3q

Cross-user cart and wishlist modification in Ecommerce Template

Priority LOW 31

Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce Template allows any authenticated user to delete and modify the cart and wishlist rows of any o…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-22 Fixed CWE-639
TI-2026-79299 CVE-2026-115450 · GHSA-5222-hwj8-q4fh

Price manipulation in MarcosCamara01 Ecommerce Template checkout flow

Priority LOW 31

External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one prod…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-10-22 Fixed CWE-472
Open these records in search →