Read the docs

phoca.cz

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

phoca.cz records in CISA KEV

No phoca.cz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Com Phocadocumentation 1 record LOW Download 1 record MEDIUM Maps 1 record LOW Phoca Cart 1 record MEDIUM

Records

1 record in Phoca Cart · all components

TI-2026-67747 CVE-2026-102775 · GHSA-6qrr-hhgq-84g9

Authorization bypass in Phoca Cart lets users download customer files

Priority MEDIUM 44

Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file download endpoint does not verify the download tokens it asks for.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00371 Published 2026-10-05 No fix listed CWE-639
Open these records in search →