Online shopping portal

This hub aggregates every CVE we track for Online shopping portal, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Online shopping portal.

• CVE-2025-65647Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.4.3Nov 25, 2025
• CVE-2024-44661PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.5.4Nov 17, 2025
• CVE-2024-44660PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.6.5Nov 17, 2025
• CVE-2024-44664PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.6.5Nov 17, 2025
• CVE-2024-44662PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.6.5Nov 17, 2025
• CVE-2024-44663PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.6.5Nov 17, 2025
• CVE-2024-44659PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.9.8Nov 17, 2025
• CVE-2025-52074PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity parameter when adding a product to the cart.6.1Sep 12, 2025
• CVE-2025-57576PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.5.4Sep 4, 2025
• CVE-2025-57148phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.9.1Sep 3, 2025
• CVE-2025-5367PHPGurukul Online Shopping Portal Project category.php sql injection7.3May 31, 2025
• CVE-2025-5079PHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection7.3May 22, 2025
• CVE-2025-5078PHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection7.3May 22, 2025
• CVE-2025-5077Campcodes Online Shopping Portal edit-subcategory.php sql injection7.3May 22, 2025
• CVE-2025-5059Campcodes Online Shopping Portal edit-subcategory.php unrestricted upload4.7May 21, 2025