NewsSecurityWeek
Drupal Commerce Core Vulnerability Exploited Against Online Stores
Teaser from the source
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Commerce
Other advisories
- MediumCVE-2026-109231Vendidero Germanized for WooCommerce: Umgehung des vorgesehenen Ablaufs
- MediumCVE-2026-104926ThemeHigh WooCommerce Extra Product Options Pro: Cross-Site-Scripting (XSS)
- MediumCVE-2026-104926ThemeHigh WooCommerce Extra Product Options Pro: Cross-Site-Scripting (XSS)
- MediumCVE-2026-109231Vendidero Germanized for WooCommerce: Umgehung des vorgesehenen Ablaufs
- MediumCVE-2026-88942WBW Product Filter for WooCommerce by WBW: Cross-Site-Scripting (XSS)
- MediumCVE-2026-11396WBW Product Filter for WooCommerce by WBW: fehlende Autorisierung
- MediumCVE-2026-119166Uscnanbu Welcart e-Commerce: unzureichende Authentifizierung
- HighCVE-2026-119065Arosoft Shipping Zones by Drawing for WooCommerce: Cross-Site-Scripting (XSS)
Other news entries
- Drupal warns of critical Commerce Core flaw exploited in attacksNewsBleepingComputer
- Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass FlawNewsThe Hacker News
- Angreifer nehmen Brotli-, Adobe-Commerce- und Magento-Lecks ins VisierNewsheise Security
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- Hackers hijack Convertr analytics script to steal payment card dataNewsBleepingComputer
- Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoNewsThe Hacker News
- Oracle Commerce: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Ahold Delhaize Restoring Services Disrupted by CyberattackNewsSecurityWeek
Source: https://www.securityweek.com/drupal-commerce-core-vulnerability-exploited-against-online-stores/
ID