Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: likeadmin-likeshop Clear all filters
TI-2026-46841 CVE-2026-65707 · GHSA-xvrr-g8q6-2w6q

Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint

Priority HIGH 72

Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00464 Published 2026-07-24 No fix listed CWE-89