CVEs we hold for Ec-cube

Records whose assigning authority named Ec-cube as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-30777no title heldEC-CUBE 4.3 series

CVE-2024-41924no title heldEC-CUBE 4 series

CVE-2024-41141no title heldEC-CUBE Web API Plugin (4.2 series)

CVE-2023-46845no title heldEC-CUBE 3 series

CVE-2023-40281no title heldEC-CUBE 2 series

CVE-2023-25077no title heldEC-CUBE 4 series

CVE-2023-22838no title heldEC-CUBE 4 series

CVE-2023-22438no title heldEC-CUBE 2 series

CVE-2022-40199no title heldEC-CUBE 4 series

CVE-2022-38975no title heldEC-CUBE 4 series

CVE-2022-37346no title heldEC-CUBE CO.,LTD. Product Image Bulk Upload Plugin

CVE-2022-25355no title heldEC-CUBE 4 series

CVE-2022-21179no title heldEC-CUBE plugin 'Mail Magazine Management Plugin'

CVE-2021-20842no title heldEC-CUBE 2 series

CVE-2021-20841no title heldEC-CUBE 2 series

CVE-2021-20778no title heldEC-CUBE

CVE-2021-20751no title heldEC-CUBE

CVE-2021-20750no title heldEC-CUBE

CVE-2021-20744no title heldEC-CUBE 3.0 series)

CVE-2021-20743no title heldEC-CUBE 3.0 series)

CVE-2021-20742no title heldEC-CUBE 3.0 series)

CVE-2021-20717no title heldEC-CUBE

CVE-2020-5680no title heldEC-CUBE

CVE-2020-5679no title heldEC-CUBE

CVE-2020-5590no title heldEC-CUBE

CVE-2014-0808no title heldEC-CUBE CO.,LTD. EC-CUBE; S‑cubism Inc. EC-Orange

26 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.