← Back

Centarro

centarro

3 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Commerce Core
commerce_core
1 CVE
Commerce Paypal
commerce_paypal
1 CVE
Commerce Cybersource
commerce_cybersource
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-81159
1Centarro
1Commerce Cybersource
Sep 16, 2026
Sep 2, 2026
N/A· v4
3.7 LOW· v3
N/A· v2
Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0.
CVE-2026-73475
1Centarro
1Commerce Paypal
Sep 8, 2026
Sep 2, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3.
CVE-2026-10769
1Centarro
1Commerce Core
Aug 6, 2026
Jul 10, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versions: from 3.3.0 to 3.3.6.