VulnSocial

CVE-2026-7224General

LOWCVSS 5.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-04-29)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-28: 1Mentions · 2026-04-29: 2Technical Details · 2026-04-28: 104-2804-29
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-281
Disclosure1
2026-04-292
General2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-7224 A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart… https://www.cve.org/CVERecord?id=CVE-2026-7224 ----- Traducción: CVE-2026-7224 Se … http://infoflow.cloud`

    Post summary

    A new CVE (CVE‑2026‑7224) affecting SourceCodester Pizzafy 1.0 has been disclosed, but the announcement lacks detailed vulnerability, exploit, or mitigation information.

    0000033
    73 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-7224 A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_cart of the file /admin/ajax.php?action=delete_cart… https://www.cve.org/CVERecord?id=CVE-2026-7224

    Post summary

    A CVE for a delete_cart function flaw in SourceCodester Pizzafy Ecommerce 1.0 is announced, but no exploit details, fixes, or additional technical specifics are provided.

    00000165
    57.3K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-7224 A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function delete_ca… CVSS 7.3 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7224 #HP #CyberSecurity #InfoSec

    Post summary

    This post announces the discovery of CVE‑2026‑7224, a high‑severity flaw (CVSS 7.3) in SourceCodester Pizzafy Ecommerce System impacting the delete_ca function, but it provides no PoC, exploit tool, or patch information.

    0000035
    166 followersView on X

Explore more

Back to dashboard