What’s Vulnerable › Products

prodigycommerce Prodigy Commerce vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your prodigycommerce Prodigy Commerce version is affected

Latest prodigycommerce Prodigy Commerce vulnerabilities

• CVE-2026-0926 — Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name] (CVSS 9.8)
• CVE-2024-54250 — WordPress Prodigy Commerce plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-54251 — WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability (CVSS 6.5)