What’s Vulnerable › Products

macrozheng mall vulnerabilities

27 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.

Check whether your macrozheng mall version is affected

Latest macrozheng mall vulnerabilities

• CVE-2026-109410 — macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation (CVSS 2.4)
• CVE-2026-109407 — macrozheng mall Coupon Redemption generateOrder race condition (CVSS 3.1)
• CVE-2026-109406 — macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error (CVSS 5.4)
• CVE-2026-108785 — macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration (CVSS 6.3)
• CVE-2026-108784 — macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error (CVSS 6.5)
• CVE-2026-82423 — macrozheng mall Payment Status Endpoint paySuccess behavioral workflow (CVSS 5.4)
• CVE-2026-82364 — macrozheng mall Order Submission submit race condition (CVSS 4.2)
• CVE-2026-79406 — macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error (CVSS 4.3)
• CVE-2026-19361 — macrozheng mall mall-portal getAuthCode password recovery (CVSS 3.7)
• CVE-2026-15186 — macrozheng mall Portal Endpoint create resource injection (CVSS 6.3)
• CVE-2026-10070 — macrozheng mall Super Admin Password update improper authorization (CVSS 4.7)
• CVE-2026-25858 — macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure (CVSS 9.1)
• CVE-2025-15118 — macrozheng mall Member Endpoint update improper authorization (CVSS 4.3)
• CVE-2025-13443 — macrozheng mall delete access control (CVSS 6.5)
• CVE-2025-13118 — macrozheng mall-swarm paySuccess improper authorization (CVSS 4.3)
• CVE-2025-13117 — macrozheng mall-swarm/mall cancelOrder improper authorization (CVSS 5.3)
• CVE-2025-13116 — macrozheng mall-swarm/mall cancelUserOrder improper authorization (CVSS 5.3)
• CVE-2025-13115 — macrozheng mall-swarm/mall Order Details detail improper authorization (CVSS 5.3)
• CVE-2025-9836 — macrozheng mall paySuccess authorization (CVSS 4.3)
• CVE-2025-9835 — macrozheng mall cancelUserOrder cancelOrder authorization (CVSS 4.3)
• CVE-2025-9514 — macrozheng mall Registration weak password (CVSS 3.7)
• CVE-2025-8755 — macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization (CVSS 5.3)
• CVE-2025-8750 — macrozheng mall Add Product Page upload cross site scripting (CVSS 5.4)
• CVE-2025-8742 — macrozheng mall Admin Login excessive authentication (CVSS 3.7)
• CVE-2025-8741 — macrozheng mall login cleartext transmission (CVSS 5.9)