Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Thelia — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting Thelia. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerabilities associated with Thelia, an open-source e-commerce platform, categorized by weakness type and specific software tags. The content covers a comprehensive collection of disclosed flaws, including remote code execution, cross-site scripting, and authentication bypasses, spanning a timeline from initial public releases to the most recent advisory updates. By reviewing this curated data, users can efficiently track vendor security advisories to stay informed about emerging threats and response timelines. Furthermore, visitors can gain a deeper understanding of specific weakness classes by observing how they manifest within the Thelia architecture and its extensions. The page also serves as a historical record, allowing administrators and developers to look up a product's vulnerability history and assess the cumulative risk profile over time. This resource is designed to support security assessments, compliance checks, and patch management decisions without requiring manual searching across multiple disparate sources. The information is organized to facilitate quick identification of relevant issues based on version numbers, component names, and severity levels. Access to this data helps stakeholders prioritize remediation efforts by highlighting persistent or high-impact vulnerabilities that may require immediate attention. All entries are sourced from official vendor notifications and recognized vulnerability databases to ensure accuracy and reliability. This approach enables a systematic analysis of the software's security posture, helping teams maintain a secure deployment environment by addressing known defects proactively.

Found 13 results / 13 Clear Filters
Top products by Thelia: Thelia
CVE ID Title CVSS Severity Published
CVE-2026-109397 Thelia before 3.1.2 and 3.2.x before 3.2.1 File Upload RCE via Filename Trailing Space — Thelia CWE-434 7.2 High 2026-10-12
CVE-2026-109396 Thelia before 3.1.2 and 3.2.x before 3.2.1 CSV Formula Injection via Exports — Thelia CWE-1236 4.2 Medium 2026-10-12
CVE-2026-107248 CVE-2026-107248 — Thelia - - 2026-10-12
CVE-2026-103537 CVE-2026-103537 — Thelia - - 2026-10-12
CVE-2026-103535 CVE-2026-103535 — Thelia - - 2026-10-12
CVE-2026-103529 CVE-2026-103529 — Thelia - - 2026-10-12
CVE-2026-103528 CVE-2026-103528 — Thelia - - 2026-10-12
CVE-2026-103527 CVE-2026-103527 — Thelia - - 2026-10-12
CVE-2026-103526 CVE-2026-103526 — Thelia - - 2026-10-12
CVE-2026-103524 CVE-2026-103524 — Thelia - - 2026-10-12
CVE-2026-103523 CVE-2026-103523 — Thelia - - 2026-10-12
CVE-2026-103522 CVE-2026-103522 — Thelia - - 2026-10-12
CVE-2026-103521 CVE-2026-103521 — Thelia - - 2026-10-12

This page lists every published CVE security advisory associated with Thelia. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.