What’s Vulnerable › Products

CE-PhoenixCart PhoenixCart vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your CE-PhoenixCart PhoenixCart version is affected

Latest CE-PhoenixCart PhoenixCart vulnerabilities

• CVE-2025-47289 — Stored XSS in CE Phoenix Cart Testimonials Allows Account Takeover if Missing HttpOnly Flag (CVSS 9.0)
• CVE-2025-47272 — PhoenixCart Vulnerable to Account Deletion Without Password Confirmation (CVSS 5.5)
• CVE-2024-25415 — (CVSS 7.2)