CVE Intelligence

Shopizer vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Shopizer products: 1 record(s), with severity, exploitation and fixes.

Shopizer 1

Exploited only (KEV) →

CVE-2026-110771 Medium · 4.3 CWE-639 Oct 14, 2026
Shopizer through 3.2.5 Authorization Bypass via Product Review customerId
Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attackers can send crafted requests to POST /api/v1/auth/products/{id}/reviews to publish reviews and ratings attributed to other store customers, corrupting authorship and product ratings.