Login Request a demo
CO
E-commerce
Commerce
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
261
CVEs
6
On KEV
10.0
Max CVSS
11
New 30D
Vulnerabilities261In the news12Timeline
Severity mix
Critical 23High 109Medium 118Low 14
Severity
All severities264Critical23High109Medium118Low14
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-27206
5.3
0%
Jun 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p13
CVE-2025-27190
5.3
1%
Apr 8
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.8-beta2
CVE-2025-27191
5.3
0%
Apr 8
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.8-beta2
CVE-2025-24425
5.3
1%
Feb 11
Adobe Commerce | Business Logic Errors (CWE-840)
Affected: through 2.4.8-beta1
CVE-2024-45124
5.3
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p10
CVE-2024-34106
5.3
1%
Jun 13
Insecure Direct Object Reference - An attacker can able to erase the victim quote details
Affected: through 2.4.4-p8
CVE-2023-38251
5.3
1%
Oct 13
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 2.4.7-beta1
CVE-2023-29290
5.3
1%
Jun 15
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a…
Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more
CVE-2023-29287
5.3
1%
Jun 15
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Information Exposure vulnerability that could lead to a security…
Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more
CVE-2023-22250
5.3
1%
Mar 27
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass
Affected: before 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5
CVE-2022-35689
5.3
1%
Oct 14
Adobe Commerce Improper Access Control Security feature bypass
Affected: before 2.4.4; 2.4.4; 2.4.4; 2.4.5
CVE-2022-35692
5.3
1%
Aug 19
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a…
Affected: 2.4.0 before 2.4.4
CVE-2022-34259
5.3
2%
Aug 16
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a…
Affected: 2.3.0 before 2.3.7; 2.4.0 before 2.4.3; 2.3.7; 2.3.7; 2.3.7; 2.3.7; +4 more
CVE-2021-21012
5.3
4%
Jan 13
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module
Affected: through 2.3.6; 2.4.0; 2.4.0; 2.4.1
CVE-2026-48411
4.9
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug
CVE-2024-45119
4.9
1%
Oct 10
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: through 2.4.4-p10
CVE-2024-20716
4.9
1%
Feb 15
Force high-usage of resources by generating unlimited coupons: Adobe Commerce
Affected: through 2.4.4-p6
CVE-2023-26367
4.9
1%
Oct 13
Error based file extraction via PHP filter chains during product bulk import logic
Affected: through 2.4.7-beta1
CVE-2023-29292
4.9
1%
Jun 15
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead…
Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more
CVE-2023-29291
4.9
1%
Jun 15
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead…
Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more
CVE-2026-47999
4.8
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15
CVE-2026-34658
4.8
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17
CVE-2026-34655
4.8
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-21291
4.8
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16
CVE-2025-54266
4.8
0%
Oct 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15
CVE-2024-45127
4.8
0%
Oct 10
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.4-p10
CVE-2024-34105
4.8
1%
Jun 13
Stored Cross Site Scripting in Order Comment
Affected: through 2.4.4-p8
CVE-2023-22249
4.8
58%
Mar 27
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…
Affected: before 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5
CVE-2022-34258
4.8
69%
Aug 16
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be…
Affected: 2.3.0 before 2.3.7; 2.4.0 before 2.4.3; 2.3.7; 2.3.7; 2.3.7; 2.3.7; +4 more
CVE-2026-21359
4.7
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15
CVE-2026-95630
4.3
0%
Oct 13
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep, 2.4.6-2026-sep, 2.4.5-2026-sep, 2.4.4-2026-sep
CVE-2026-34656
4.3
0%
May 12
Adobe Commerce | Improper Authorization (CWE-285)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17
CVE-2026-21297
4.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16
CVE-2026-21285
4.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16
CVE-2026-21296
4.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15
CVE-2025-49550
4.3
0%
Jun 25
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.4-p13
CVE-2025-27188
4.3
1%
Apr 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.8-beta2
CVE-2025-27189
4.3
1%
Apr 8
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
Affected: through 2.4.8-beta2
CVE-2025-24420
4.3
1%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.8-beta1
CVE-2025-24419
4.3
1%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.8-beta1
CVE-2025-24436
4.3
1%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.8-beta1
CVE-2025-24423
4.3
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.8-beta1
CVE-2025-24421
4.3
1%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.8-beta1
CVE-2025-24435
4.3
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.8-beta1
CVE-2024-45121
4.3
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p10
CVE-2024-45122
4.3
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p10
CVE-2024-45130
4.3
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p10
CVE-2024-45129
4.3
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p10
CVE-2024-45125
4.3
1%
Oct 10
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.4-p10
CVE-2024-39419
4.3
0%
Aug 14
A user without ship permissions can ship the orders
Affected: through 2.4.4-p9
Page 2 of 3 · 118 total
123