Read the docs

nivocart

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nivocart records in CISA KEV

No nivocart vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-75058 CVE-2026-111277

Missing authorization in NivoCart exposes guest order invoices

Priority HIGH 77

NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order_id.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00478 Published 2026-10-15 No fix listed CWE-862
TI-2026-63323 CVE-2026-94107 · GHSA-g4x6-pg76-867r

NivoCart through 2.4.0 Predictable Administrator Password Reset Token

Priority MEDIUM 42

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10).

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00568 Published 2026-09-20 No fix listed CWE-338
TI-2026-63320 CVE-2026-94104 · GHSA-m76p-p4wh-76x9

NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager

Priority MEDIUM 41

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00671 Published 2026-09-20 No fix listed CWE-434
TI-2026-75059 CVE-2026-111278

CAPTCHA bypass in NivoCart exposes answer in page HTML

Priority LOW 36

NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in the HTML.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00321 Published 2026-10-15 No fix listed CWE-804
Open these records in search →