Molla - eCommerce HTML5 Template

Molla - eCommerce HTML5 Template has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Code Injection, behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (2) reported by Tran Nguyen Bao Khanh.

01234567891002.08.2025Today02.08.20259.8Molla <= 1.5.13 - Unauthenticated Remote Code Execution CVSS 9.8 · 02.08.202525.02.20268.1Molla - eCommerce HTML5 Template <= 1.5.16 - Unauthenticated Local File Inclusion CVSS 8.1 · 25.02.202620.03.20266.1Molla - eCommerce HTML5 Template < 1.5.19 - Reflected Cross-Site Scripting CVSS 6.1 · 20.03.2026

Strategic Overview

Avg CVSSHigh
8.0/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all Molla - eCommerce HTML5 Template vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-60070

Molla <= 1.5.13 - Unauthenticated Remote Code Execution

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C