https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-23T12:14:24.183878+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114387 fkie_cve-2026-114387 2026-10-23T12:14:24.187665+00:00

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store() or Permissions::togglePermission() directly over /livewire/update to create admin accounts and escalate to full administrator.

 https://db.gcve.eu/vuln/ghsa-6wfw-fw32-2h84 GHSA-6wfw-fw32-2h84 2026-10-23T12:14:24.187767+00:00

Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard to create administrators and grant permissions. Attackers can call CreateTeamMember::store() or Permissions::togglePermission() directly over /livewire/update to create admin accounts and escalate to full administrator.