{"schema_version":1,"title":"CodeAstro Ecommerce Website vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in CodeAstro Ecommerce Website: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-14799, was published on 6 July 2026.","url":"https://junglewise.ai/threats/technologies/ecommerce-website","json_url":"https://junglewise.ai/threats/technologies/ecommerce-website.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ecommerce-website","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":4,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":4},"latest":[{"cve":"CVE-2026-14799","cvss":6.3,"slug":"cve-2026-14799-codeastro-ecommerce-website-sql-injection-in-my-account-php","title":"CodeAstro Ecommerce Website SQL injection in my_account.php","severity":"medium","exploited":false,"published_at":"2026-07-06T06:16:27.71+00:00","url":"https://junglewise.ai/threats/cve-2026-14799-codeastro-ecommerce-website-sql-injection-in-my-account-php"},{"cve":"CVE-2026-14767","cvss":6.3,"slug":"cve-2026-14767-codeastro-ecommerce-website-sql-injection-in-confirm-php","title":"CodeAstro Ecommerce Website SQL injection in confirm.php","severity":"medium","exploited":false,"published_at":"2026-07-05T20:16:31.293+00:00","url":"https://junglewise.ai/threats/cve-2026-14767-codeastro-ecommerce-website-sql-injection-in-confirm-php"},{"cve":"CVE-2026-14639","cvss":6.3,"slug":"cve-2026-14639-codeastro-ecommerce-website-sql-injection-in-my-account-php","title":"CodeAstro Ecommerce Website SQL injection in my_account.php","severity":"medium","exploited":false,"published_at":"2026-07-04T18:16:28.7+00:00","url":"https://junglewise.ai/threats/cve-2026-14639-codeastro-ecommerce-website-sql-injection-in-my-account-php"},{"cve":"CVE-2025-13793","cvss":4.3,"epss":0.0032,"slug":"cve-2025-13793-winston-dsouza-ecommerce-website-cross-site-scripting-in-header","title":"winston-dsouza Ecommerce-Website cross-site scripting in header menu","severity":"medium","exploited":false,"published_at":"2025-11-30T17:15:45.273+00:00","url":"https://junglewise.ai/threats/cve-2025-13793-winston-dsouza-ecommerce-website-cross-site-scripting-in-header"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"CodeAstro Membership Management System","slug":"membership-management-system","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/membership-management-system"},{"name":"CodeAstro Apartment Visitor Management System","slug":"apartment-visitor-management-system","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/apartment-visitor-management-system"},{"name":"CodeAstro Leave Management System","slug":"leave-management-system","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/leave-management-system"},{"name":"CodeAstro Online Classroom","slug":"online-classroom","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/online-classroom"},{"name":"CodeAstro Student-Attendance-Management-System","slug":"student-attendance-management-system","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/student-attendance-management-system"},{"name":"CodeAstro Simple Online Leave Management System","slug":"simple-online-leave-management-system","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/simple-online-leave-management-system"},{"name":"CodeAstro Payroll System","slug":"payroll-system","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/payroll-system"}],"technology":{"hub":true,"name":"CodeAstro Ecommerce Website","slug":"ecommerce-website","vendor":{"name":"CodeAstro","slug":"codeastro","url":"https://junglewise.ai/threats/vendors/codeastro"},"aliases":[],"category":"web-application","homepage":"https://codeastro.com/ecommerce-website-in-php-with-source-code/","repo_url":"https://github.com/codeastro/Ecommerce-Website-PHP","description":"Ecommerce Website is a web application developed by CodeAstro for managing online retail operations and transactions.","url":"https://junglewise.ai/threats/technologies/ecommerce-website"},"most_severe":[{"cve":"CVE-2026-14799","cvss":6.3,"slug":"cve-2026-14799-codeastro-ecommerce-website-sql-injection-in-my-account-php","title":"CodeAstro Ecommerce Website SQL injection in my_account.php","severity":"medium","exploited":false,"published_at":"2026-07-06T06:16:27.71+00:00","url":"https://junglewise.ai/threats/cve-2026-14799-codeastro-ecommerce-website-sql-injection-in-my-account-php"},{"cve":"CVE-2026-14767","cvss":6.3,"slug":"cve-2026-14767-codeastro-ecommerce-website-sql-injection-in-confirm-php","title":"CodeAstro Ecommerce Website SQL injection in confirm.php","severity":"medium","exploited":false,"published_at":"2026-07-05T20:16:31.293+00:00","url":"https://junglewise.ai/threats/cve-2026-14767-codeastro-ecommerce-website-sql-injection-in-confirm-php"},{"cve":"CVE-2026-14639","cvss":6.3,"slug":"cve-2026-14639-codeastro-ecommerce-website-sql-injection-in-my-account-php","title":"CodeAstro Ecommerce Website SQL injection in my_account.php","severity":"medium","exploited":false,"published_at":"2026-07-04T18:16:28.7+00:00","url":"https://junglewise.ai/threats/cve-2026-14639-codeastro-ecommerce-website-sql-injection-in-my-account-php"},{"cve":"CVE-2025-13793","cvss":4.3,"epss":0.0032,"slug":"cve-2025-13793-winston-dsouza-ecommerce-website-cross-site-scripting-in-header","title":"winston-dsouza Ecommerce-Website cross-site scripting in header menu","severity":"medium","exploited":false,"published_at":"2025-11-30T17:15:45.273+00:00","url":"https://junglewise.ai/threats/cve-2025-13793-winston-dsouza-ecommerce-website-cross-site-scripting-in-header"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}