Browse all 13 CVE security advisories affecting Thelia. AI-powered Chinese analysis, POCs, and references for each vulnerability.
This page aggregates security vulnerabilities associated with Thelia, an open-source e-commerce platform, categorized by weakness type and specific software tags. The content covers a comprehensive collection of disclosed flaws, including remote code execution, cross-site scripting, and authentication bypasses, spanning a timeline from initial public releases to the most recent advisory updates. By reviewing this curated data, users can efficiently track vendor security advisories to stay informed about emerging threats and response timelines. Furthermore, visitors can gain a deeper understanding of specific weakness classes by observing how they manifest within the Thelia architecture and its extensions. The page also serves as a historical record, allowing administrators and developers to look up a product's vulnerability history and assess the cumulative risk profile over time. This resource is designed to support security assessments, compliance checks, and patch management decisions without requiring manual searching across multiple disparate sources. The information is organized to facilitate quick identification of relevant issues based on version numbers, component names, and severity levels. Access to this data helps stakeholders prioritize remediation efforts by highlighting persistent or high-impact vulnerabilities that may require immediate attention. All entries are sourced from official vendor notifications and recognized vulnerability databases to ensure accuracy and reliability. This approach enables a systematic analysis of the software's security posture, helping teams maintain a secure deployment environment by addressing known defects proactively.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-109397 | Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space — Thelia CWE-434 | 7.2 | High | 2026-10-12 |
| CVE-2026-109396 | Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via Exports — Thelia CWE-1236 | 4.2 | Medium | 2026-10-12 |
| CVE-2026-107248 | CVE-2026-107248 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103537 | CVE-2026-103537 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103535 | CVE-2026-103535 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103529 | CVE-2026-103529 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103528 | CVE-2026-103528 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103527 | CVE-2026-103527 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103526 | CVE-2026-103526 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103524 | CVE-2026-103524 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103523 | CVE-2026-103523 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103522 | CVE-2026-103522 — Thelia | - | - | 2026-10-12 |
| CVE-2026-103521 | CVE-2026-103521 — Thelia | - | - | 2026-10-12 |
This page lists every published CVE security advisory associated with Thelia. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.