OpenCart vulnerabilities - every known CVE affecting the platform
OpenCart powers a large number of small and mid-sized storefronts, where unpatched core or extension vulnerabilities often go unnoticed the longest.
opencart security
Every published CVE affecting opencart
This list contains every CVE that names opencart as an affected product. Records come from the official CVE feeds maintained by MITRE and NIST. Each record includes a CVSS severity score, the affected version range, and a link to the full NVD entry. New records usually appear here within minutes of publication.
Third-party plugins, extensions, and add-ons built on top of opencart are included alongside the core product. In most CMS ecosystems, the majority of CVEs come from the extension layer rather than the core application itself. Searching by component name is just as important as searching by platform name.
Understanding CVSS scores
Severity ratings explained
Every CVE has a CVSS 3.x score from 0 to 10. The score is based on how the vulnerability can be reached (over the network or locally), how complex the exploit is, what access an attacker needs beforehand, whether a victim has to do something first, and the impact on confidentiality, integrity, and availability if the attack succeeds.
Search by component name, vendor, or keyword to filter this list. Click any CVE ID to see the full record. If your installed version falls within the affected range, update immediately or check the vendor's security advisory.
| CVE ID | Severity | CVSS | Title | Published |
|---|---|---|---|---|
| CVE-2026-18412 | — | — | Aug 10, 2026 14d ago | |
| CVE-2018-25336 | medium | 6.9/10 | May 17, 2026 3mo ago | |
| CVE-2026-5331 | medium | 5.1/10 | Apr 2, 2026 4mo ago | |
| CVE-2024-58341 | high | 8.8/10 | Mar 25, 2026 5mo ago | |
| CVE-2026-3714 | medium | 5.1/10 | Mar 8, 2026 5mo ago | |
| CVE-2025-15116 | medium | 6.3/10 | Dec 28, 2025 8mo ago | |
| CVE-2025-22335 | high | 7.1/10 | Jan 7, 2025 1y ago | |
| CVE-2024-51835 | medium | 6.5/10 | Nov 19, 2024 1y ago | |
| CVE-2023-2315 | high | 8.1/10 | Sep 26, 2023 2y ago |
