PatchTheCVEabantecart vulnerabilities and fixes
Recent CVEs affecting abantecart, with upgrade or downgrade steps. 6 tracked.
abantecart has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-08-27. Highest priority: CVE-2025-50972 (score 54/100).
- CVE-2025-50972 CRITICAL 9.8 DOWNGRADE SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL com
- CVE-2025-50971 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in AbanteCart version 1.4.2 allows unauthenticated attackers to gain access
- CVE-2025-40627 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execu
- CVE-2025-40626 MEDIUM 6.1 DOWNGRADE Reflected Cross-Site Scripting (XSS) vulnerability in AbanteCart v1.4.0, that could allow an attacker to execu
- CVE-2024-50802 MEDIUM 6.0 DOWNGRADE A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin
- CVE-2024-50801 MEDIUM 6.0 DOWNGRADE A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin
FAQ
How do I fix abantecart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is abantecart being exploited right now?
None of the tracked abantecart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which abantecart CVE should I patch first?
CVE-2025-50972 currently ranks highest (54/100): SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL com.