https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14016.htmlhttps://patchthecve.com/cve/CVE-2025-14016.htmlSun, 18 Oct 2026 15:10:00 +0000MEDIUM 5.4: A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file /member/readHistory/delete. Such manipulation of the argument ids leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed publiclyhttps://patchthecve.com/cve/CVE-2025-13118.htmlhttps://patchthecve.com/cve/CVE-2025-13118.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 6.3: A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be ushttps://patchthecve.com/cve/CVE-2025-13117.htmlhttps://patchthecve.com/cve/CVE-2025-13117.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 5.4: A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exphttps://patchthecve.com/cve/CVE-2025-13116.htmlhttps://patchthecve.com/cve/CVE-2025-13116.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 5.4: A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has https://patchthecve.com/cve/CVE-2025-13115.htmlhttps://patchthecve.com/cve/CVE-2025-13115.htmlSun, 18 Oct 2026 20:10:00 +0000MEDIUM 4.3: A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the atthttps://patchthecve.com/cve/CVE-2025-13114.htmlhttps://patchthecve.com/cve/CVE-2025-13114.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A vulnerability was identified in macrozheng mall-swarm up to 1.0.3. This affects the function updateAttr of the file /cart/update/attr. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was con