Shopizer CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Shopizer CVE published 2026-10-14

CVE-2026-110771

CVE-2026-110771 is an authorization bypass vulnerability in Shopizer through 3.2.5 that allows authenticated customers to post reviews as other customers. This issue can lead to corrupted authorship and product ratings. The vulnerability can be exploited by sending crafted requests to POST /api/v1/auth/products/{id}/reviews, potentially leading to reputational damage and erosion of customer trust. Defende [truncated]