What’s Vulnerable › Products

ECshop vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ECshop version is affected

Latest ECshop vulnerabilities

• CVE-2026-82922 — ShopEx ECShop flow.php flow_update_cart sql injection (CVSS 7.3)
• CVE-2026-82921 — ShopEx ECShop pack.php check_img_type unrestricted upload (CVSS 7.3)
• CVE-2024-35362 — (CVSS 5.4)
• CVE-2024-31025 — (CVSS 7.5)
• CVE-2024-1530 — ECshop view_sendlist.php sql injection (CVSS 8.8)
• CVE-2023-5294 — ECshop order.php sql injection (CVSS 8.8)
• CVE-2023-5293 — ECshop leancloud.php sql injection (CVSS 6.5)
• CVE-2023-39112 — (CVSS 6.5)
• CVE-2023-1185 — ECshop New Product unrestricted upload (CVSS 8.8)
• CVE-2023-1184 — ECshop Backup Database database.php unrestricted upload (CVSS 8.8)
• CVE-2023-0783 — EcShop PHP File template.php unrestricted upload (CVSS 9.8)
• CVE-2021-41460 — (CVSS 7.5)
• CVE-2021-43679 — (CVSS 9.8)
• CVE-2020-20640 — (CVSS 6.1)
• CVE-2020-22206 — (CVSS 9.8)
• CVE-2020-22205 — (CVSS 9.8)
• CVE-2020-22204 — (CVSS 9.8)
• CVE-2010-2042 — (CVSS 7.5)