yshop-crm vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

YS

Product

yshop-crm

by guchengwuyue · last CVE Oct 16, 2026

13

CVEs

0

On KEV

7.1

Max CVSS

4

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 1Medium 12Low 0

Severity

All severities13 Critical0 High1 Medium12 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add yshop-crm to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-92456	7.1	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints Affected: through 2.1.3
CVE-2026-92463	6.5	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing Affected: through 2.1.3
CVE-2026-92462	6.5	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep Affected: through 2.1.3
CVE-2026-92460	6.5	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing Affected: through 2.1.3
CVE-2026-92459	6.5	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint Affected: through 2.1.3
CVE-2026-92457	6.5	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice Affected: through 2.1.3
CVE-2026-111703	6.3	0%	Oct 16	yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints Affected: through 2.1.3
CVE-2026-109173	4.3	0%	Oct 12	yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint Affected: through 2.1.3
CVE-2026-109172	4.3	0%	Oct 12	yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint Affected: through 2.1.3
CVE-2026-109171	4.3	0%	Oct 12	yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/check Affected: through 2.1.3
CVE-2026-92461	4.3	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint Affected: through 2.1.3
CVE-2026-92458	4.3	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale Affected: through 2.1.3
CVE-2026-92455	4.3	0%	Sep 16	yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints Affected: through 2.1.3