Security Notification – OpenCart Vulnerability Fix
A public article has revealed a method for unauthorized access to administrator or user accounts.
During our review of the OpenCart platform, we identified that it is vulnerable to this type of attack.
To address this issue, we have developed a patch that fixes the security vulnerability within the platform.

Security Issue Details
- Name: Puny-Code, 0-Click Account Takeover
- Severity: Critical (9.1)
- Weakness: Improper Authentication – Generic
- More Information: https://blog.voorivex.team/puny-code-0-click-account-takeover
- Video Explanation: https://www.youtube.com/watch?v=Cj1sOFHDClM

Note:
This security issue has already been reported to the OpenCart team. However, due to the urgency and critical nature of the vulnerability, we have created an extension that provides an immediate fix.