E-Commerce

PrestaShop Checkout Zero-Click Account Takeover via ExpressCheckout Endpoint (CVE-2025-61922) newCVE-2025-61922webCRITICAL 9.1Patched2026-07-06Saleor GraphQL IDOR — Unauthenticated Order PII Exfiltration (CVE-2026-24136) newCVE-2026-24136webHIGH 7.5Patched2026-07-05Unauthenticated RCE in Mirasvit Full Page Cache Warmer for Magento 2 (CVE-2026-45247) new KEV EPSS 28%CVE-2026-45247webCRITICAL 9.3Unverified2026-07-01