nivocart

3 known vulnerabilities in nivocart, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-94107 CVSS 9.2 critical NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery…
CVE-2026-94105 CVSS 6.9 medium NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows…
CVE-2026-94104 CVSS 8.7 high NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file…