Drupal warns of critical Commerce Core flaw exploited in attacks
Teaser from the source
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on Commerce
Other advisories
- HighCVE-2026-120856Rymera Web Co Invoice Gateway for WooCommerce: Cross-Site-Scripting (XSS)
- HighCVE-2026-120856Rymera Web Co Invoice Gateway for WooCommerce: Cross-Site-Scripting (XSS)
- MediumCVE-2026-120855TemplateInvaders TI WooCommerce Wishlist: Cross-Site-Scripting (XSS)
- MediumCVE-2026-120855TemplateInvaders TI WooCommerce Wishlist: Cross-Site-Scripting (XSS)
- HighCVE-2026-123463WP Wham Checkout Files Upload for WooCommerce: Cross-Site-Scripting (XSS)
- HighCVE-2026-119505Welcart e-Commerce: Cross-Site-Scripting (XSS)
- MediumCVE-2026-119503Welcart e-Commerce: Cross-Site-Scripting (XSS)
- HighCVE-2026-119505Welcart e-Commerce: Cross-Site-Scripting (XSS)
Other news entries
- Drupal Commerce Core Vulnerability Exploited Against Online StoresNewsSecurityWeek
- Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawNewsThe Hacker News
- Angreifer nehmen Brotli-, Adobe-Commerce- und Magento-Lecks ins VisierNewsheise Security
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- Hackers hijack Convertr analytics script to steal payment card dataNewsBleepingComputer
- Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoNewsThe Hacker News
- Oracle Commerce: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Ahold Delhaize Restoring Services Disrupted by CyberattackNewsSecurityWeek
ID