Shopware fixes Store API vulnerability allowing administrator takeover
Sansec discovered a Shopware 6 Store API flaw enabling administrator takeover; merchants should immediately update to 6.7.13.1 or 6.6.10.23.
2 stories, newest first · one card per story
Sansec discovered a Shopware 6 Store API flaw enabling administrator takeover; merchants should immediately update to 6.7.13.1 or 6.6.10.23.
A critical unauthenticated flaw in the User Profile Builder WordPress plugin exposed roughly 40,000 sites to administrator account takeover.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views