Researcher claims he found RCE, authentication bypass, CSRF flaws
Source
Indian academic bookseller Oswaal Books fixes alleged RCE and other serious vulnerabilities with Shopify relaunch

Researcher claims he found RCE, authentication bypass, CSRF flaws
Source