01 Record

CVE-2026-19837

Webkul Bagisto Customer Search search information disclosure

MediumPUBLISHEDCNA: VulDB

Base score5.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

02 Description

Webkul Bagisto Customer Search search information disclosure

Published: 2026-08-14 15:45Z2 HR AGO
Last updated: 2026-08-14 16:18Z2 HR AGO
Reserved: 2026-08-14
Assigning CNA: VulDB
Record state: PUBLISHED
Severity: Medium (CVSS 5.1)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Weaknesses: CWE-200 CWE-284
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 34f2ff674ba046a4dbcd07af298786310344375baa11663e065cf7ef2760234c

VendorProductVersionsPlatforms

WebkulBagisto2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4—

vuldb.comVDB-389975 | Webkul Bagisto Customer Search search information disclosurehttps://vuldb.com/vuln/389975vdb-entrytechnical-description
vuldb.comVDB-389975 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/389975/ctisignaturepermissions-required
vuldb.comCVE-2026-19837 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-19837third-party-advisory
vuldb.comSubmit #870345 | Webkul Bagisto <=2.4.4 Information Disclosurehttps://vuldb.com/submit/870345third-party-advisory
github.comhttps://github.com/Mitchell45/PHP_Web_POCs/blob/main/Bagisto/10_english_vulnerability_report.mdexploit