e-commerce package vulnerabilities and fixes

Recent CVEs affecting e-commerce package, with upgrade or downgrade steps. 3 tracked.

Also searched as: e commerce package, e-commercepackage.

e-commerce package has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-02-12. Highest priority: CVE-2025-10969 (score 48/100).

• CVE-2025-13004 MEDIUM 6.3 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in Farktor Software E-Commerce Services Inc
• CVE-2025-13002 HIGH 8.2 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in F
• CVE-2025-10969 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor

FAQ

How do I fix e-commerce package vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is e-commerce package being exploited right now?

None of the tracked e-commerce package CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which e-commerce package CVE should I patch first?

CVE-2025-10969 currently ranks highest (48/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farktor .

RSS feed for e-commerce package · ← Back to latest CVEs