Loading feed…
No Critical or High events in this view.
Updated
Drupal Commerce Core access bypass is reported as exploited in the wild, with store owners urged to audit their orders.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild.
Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.
Who's reporting
Official authority missing. no OfficialVendor statement missing. no VendorResearcher coverage missing. no Researcher
No corroborated perspectives yet. Treat claims cautiously.
End of feed