What’s Vulnerable › Products

Zen Cart vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Zen Cart version is affected

Latest Zen Cart vulnerabilities

• CVE-2026-108829 — Zen Cart Module Configuration modules.php sql injection (CVSS 4.7)
• CVE-2026-108828 — Zen Cart Admin Panel configuration.php eval sql injection (CVSS 4.1)
• CVE-2026-108827 — Zen Cart Administrative Module Management general.php zen_call_function code injection (CVSS 4.1)
• CVE-2026-108826 — Zen Cart PayPal IPN paypaldp.php zen_db_perform sql injection (CVSS 7.3)