CVE-2016-4837: Ec-Cube Discount Coupon

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Ec-Cube Discount Coupon: up to and including 1.5

Published 2016-08-01. Last modified 2026-06-17.