CVE-2026-62989 - Shopper: missing variant-delete authorization permits destructive single and bulk actions
CVE ID :CVE-2026-62989 Published : Oct. 30, 2026, 9:17 p.m. | 44 minutes ago Description :Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/admin/src/Livewire/Components/Products/Form/Variants.php` exposes `DeleteAction` and...