CVE-2026-114387 - Shopper 2.0.0 before 2.6.0 Privilege Escalation via Unguarded Livewire Components
CVE ID :CVE-2026-114387 Published : Oct. 21, 2026, 1:18 p.m. | 48 minutes ago Description :Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard to create administrators and grant permissions. Attackers can...