Bagisto vulnerabilities

CVEs whose affected-version data names the Bagisto package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101139Low· 2.7PoC

today

A vulnerability was detected in Webkul Bagisto up to 2.4.6

A vulnerability was detected in Webkul Bagisto up to 2.4.6. This impacts an unknown function of the file /admin/sales/invoices/mass-update/state of the component Invoice Mass Status Update. Performing a manipulation results in missing au…

▾ TwilightWebkul · Bagistovia NVD