Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: MarcosCamara01 Clear all filters
TI-2026-79306 CVE-2026-115453 · GHSA-j5qr-vh53-fq3q

Cross-user cart and wishlist modification in Ecommerce Template

Priority LOW 31

Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce Template allows any authenticated user to delete and modify the cart and wishlist rows of any o…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-22 Fixed CWE-639
TI-2026-79299 CVE-2026-115450 · GHSA-5222-hwj8-q4fh

Price manipulation in MarcosCamara01 Ecommerce Template checkout flow

Priority LOW 31

External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privileges to be charged the price of one prod…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00235 Published 2026-10-22 Fixed CWE-472
TI-2026-61910 CVE-2026-91154 · GHSA-v9ch-cf39-43vr

Missing authentication in Ecommerce Template product cache revalidation allows unauthenticated denial of service

Priority LOW 37

Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.ts, revalidateProducts) in MarcosCamara01 Ecommerce Template before commit ec97209 allows a remote,…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00394 Published 2026-09-28 Fixed in ec97209 CWE-306
TI-2026-61768 CVE-2026-90896 · GHSA-qfqr-55gf-4v3j

Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII

Priority LOW 37

Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts), exposed at GET /api/stripe/checkout_sessions, in MarcosCamara01 Ecommerce Tem…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00713 Published 2026-09-14 Fixed in 91e273c CWE-306