isotope-core
2 known vulnerabilities in isotope-core, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-96600 CVSS 7.0 high Isotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled…
- CVE-2026-96599 CVSS 8.2 high Isotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing…