Vendor
high
advisory
NivoCart Unauthorized Invoice Disclosure Vulnerability
1 TTPNivoCart through 2.5.1 contains a missing authorization vulnerability in the account/order module that allows unauthenticated attackers to exfiltrate guest order invoices by iterating order identifiers.
NivoCart
1t
high
advisory
Arbitrary File Upload Vulnerability in NivoCart File Manager
1 rule 2 TTPs 1 CVENivoCart versions 2.4.0 and earlier are vulnerable to remote code execution via an arbitrary file upload flaw in the File Manager multi() endpoint.
NivoCart
web-vulnerability
rce
file-upload
cve-2026-94104
1r
2t
1c