Sourcecodester Pizzafy E-Commerce System vulnerabilities

2 CVEs affecting Sourcecodester Pizzafy E-Commerce System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-14713, published 2026-07-05.

More from Sourcecodester.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-14713, published 2026-07-05. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the…
• CVE-2026-10704, published 2026-06-03. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component…