Browse all 3 CVE security advisories affecting prodigycommerce. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Prodigycommerce operates as an e-commerce platform enabling online sales management for businesses. Historically, the platform has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting (XSS) flaws, and privilege escalation issues, as evidenced by its three recorded CVEs. These vulnerabilities often stem from insufficient input validation and improper access controls. While no major public security incidents have been widely documented, the presence of multiple CVEs indicates consistent security challenges requiring ongoing vigilance. The platform's core functionality as a transactional system makes such vulnerabilities particularly concerning, potentially exposing both business operations and customer data to compromise.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-0926 | Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name] — Prodigy CommerceCWE-98 | 9.8 | Critical | 2026-02-19 |
| CVE-2024-54250 | WordPress Prodigy Commerce plugin <= 3.0.8 - Cross Site Scripting (XSS) vulnerability — Prodigy CommerceCWE-79 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-54251 | WordPress Prodigy Commerce plugin <= 3.1.2 - Broken Access Control vulnerability — Prodigy CommerceCWE-862 | 6.5 | Medium | 2024-12-09 |
This page lists every published CVE security advisory associated with prodigycommerce. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.