Angeljudesuarez E-Commerce Website vulnerabilities

3 CVEs affecting Angeljudesuarez E-Commerce Website, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10616, published 2025-09-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8139, published 2024-08-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability has been found in itsourcecode E-Commerce Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file search_list.php. The…
CVE-2025-10616, published 2025-09-17. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack…
CVE-2025-10615, published 2025-09-17. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can…