What’s Vulnerable › Products

newbee-ltd newbee-mall vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your newbee-ltd newbee-mall version is affected

Latest newbee-ltd newbee-mall vulnerabilities

• CVE-2026-105573 — newbee-ltd newbee-mall Shopping Cart Quantity updateAccountHeadAndDetail logic error (CVSS 4.3)
• CVE-2026-94045 — newbee-ltd newbee-mall Goods Save Endpoint UploadController.java cross site scripting (CVSS 3.5)
• CVE-2026-2658 — newbee-ltd newbee-mall Multiple Endpoints cross-site request forgery (CVSS 4.3)
• CVE-2026-26219 — newbee-mall Unsalted MD5 Password Hashing Enables Offline Credential Cracking (CVSS 9.1)
• CVE-2026-26218 — newbee-mall Default Seeded Administrator Credentials Allow Account Takeover (CVSS 9.8)
• CVE-2025-10423 — newbee-mall kaptcha mallKaptcha Captcha (CVSS 3.7)
• CVE-2025-10422 — newbee-mall Order Status paySuccess improper authorization (CVSS 4.3)
• CVE-2025-4259 — newbee-mall UploadController.java upload unrestricted upload (CVSS 9.8)
• CVE-2025-1114 — newbee-mall Add Category Page save cross site scripting (CVSS 5.4)
• CVE-2024-48178 — (CVSS 8.1)
• CVE-2023-30216 — (CVSS 5.4)
• CVE-2022-27477 — (CVSS 9.8)
• CVE-2022-27476 — (CVSS 6.1)
• CVE-2020-23449 — (CVSS 7.5)
• CVE-2020-23448 — (CVSS 9.8)
• CVE-2020-23447 — (CVSS 6.1)
• CVE-2019-19113 — (CVSS 9.8)