CVE-2026-74013

eShipper Commerce versions up to 2.16.13 are vulnerable to a SQL injection flaw that allows attackers to manipulate database queries, potentially leading to unauthorized data access or modification. Organizations using these affected versions should prioritize patching this vulnerability to mitigate the risk of data breaches and maintain the integrity of their systems.