What’s Vulnerable › Products
SourceCodester Pizzafy Ecommerce System vulnerabilities
25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 25 published in the last 12 months.
Check whether your SourceCodester Pizzafy Ecommerce System version is affected
Latest SourceCodester Pizzafy Ecommerce System vulnerabilities
- CVE-2026-16226 — SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload (CVSS 4.7)
- CVE-2026-10559 — SourceCodester Pizzafy Ecommerce System index.php file inclusion (CVSS 6.3)
- CVE-2026-10558 — SourceCodester Pizzafy Ecommerce System index.php file inclusion (CVSS 6.3)
- CVE-2026-8117 — SourceCodester Pizzafy Ecommerce System index.php cross site scripting (CVSS 4.3)
- CVE-2026-7410 — SourceCodester Pizzafy Ecommerce System ajax.php add_to_cart sql injection (CVSS 6.3)
- CVE-2026-7409 — SourceCodester Pizzafy Ecommerce System ajax.php save_user sql injection (CVSS 4.7)
- CVE-2026-7408 — SourceCodester Pizzafy Ecommerce System ajax.php save_menu sql injection (CVSS 4.7)
- CVE-2026-7407 — SourceCodester Pizzafy Ecommerce System Setting ajax.php save_settings sql injection (CVSS 4.7)
- CVE-2026-7394 — SourceCodester Pizzafy Ecommerce System GET Parameter view_order.php sql injection (CVSS 4.7)
- CVE-2026-7393 — SourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted upload (CVSS 4.7)
- CVE-2026-7297 — SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting (CVSS 2.4)
- CVE-2026-7296 — SourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scripting (CVSS 2.4)
- CVE-2026-7295 — SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting (CVSS 2.4)
- CVE-2026-7294 — SourceCodester Pizzafy Ecommerce System index.php save_settings cross site scripting (CVSS 2.4)
- CVE-2026-7293 — SourceCodester Pizzafy Ecommerce System ajax.php delete_category sql injection (CVSS 4.7)
- CVE-2026-7268 — SourceCodester Pizzafy Ecommerce System ajax.php save_category sql injection (CVSS 6.3)
- CVE-2026-7267 — SourceCodester Pizzafy Ecommerce System view_prod.php sql injection (CVSS 6.3)
- CVE-2026-7266 — SourceCodester Pizzafy Ecommerce System ajax.php save_order sql injection (CVSS 6.3)
- CVE-2026-7265 — SourceCodester Pizzafy Ecommerce System index.php category sql injection (CVSS 6.3)
- CVE-2026-7264 — SourceCodester Pizzafy Ecommerce System ajax.php get_cart_items sql injection (CVSS 6.3)
- CVE-2026-7228 — SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection (CVSS 7.3)
- CVE-2026-7227 — SourceCodester Pizzafy Ecommerce System ajax.php login sql injection (CVSS 7.3)
- CVE-2026-7226 — SourceCodester Pizzafy Ecommerce System ajax.php login2 sql injection (CVSS 7.3)
- CVE-2026-7225 — SourceCodester Pizzafy Ecommerce System ajax.php delete_menu sql injection (CVSS 7.3)
- CVE-2026-7224 — SourceCodester Pizzafy Ecommerce System ajax.php delete_cart sql injection (CVSS 7.3)