30 Oct 2026
Drupal Commerce access bypass is exploited; update to 3.3.13
SA-CONTRIB-2026-254 rates CVE-2026-118539 highly critical (21 of 25): no login needed, every configuration exposed and attacks already…
Greenville, South Carolina firm that created and maintains Drupal Commerce, formerly Commerce Guys, offering ecommerce builds and migrations, integrations and monthly support retainers from $500.
The open-source Drupal Commerce framework has one steward, and it trades as Centarro. Founded in the United States in 2009 as Commerce Guys and since renamed, the company created Drupal Commerce and still maintains it, giving more than a fifth of its developers' time to open-source work. It lists offices at 411 University Ridge in Greenville, South Carolina, and in Pancevo, Serbia.
Drupal Commerce is an ecommerce framework built on Drupal. Its data model for products, variations and orders can be changed to fit a business, and it handles taxes, promotions and coupons, checkout and fulfilment workflows, several stores, languages and currencies, and headless storefronts through REST, JSON:API and GraphQL. Recent releases added recurring billing, sales of licences and file downloads, and B2B price lists. Centarro also offers a fully managed headless back end, and lists integrations with Authorize.net, Avalara AvaTax, Braintree, PayPal and ShipStation among others.
Its own work covers full ecommerce builds and migrations, upgrades of Drupal 7, 8 and 9 commerce sites, systems integration, consultations on Drupal Commerce and what it calls AI harness engineering.
Centarro pitches the framework to B2B and enterprise sellers, multi-brand businesses, wholesale distributors, standards development organisations and continuing education providers. Its site quotes Worthington Biochemical, Whisky Auctioneer and the Irish Times Group, and carries case studies on Sport Obermeyer, LUSH and Eldum Rétt. It gives the number of merchants on Drupal Commerce as more than 30,000 on its home page and more than 50,000 on its company page.
Support is sold monthly and prepaid. Production Support starts at $500 a month and covers hosting support on a platform-as-a-service, security monitoring and analysis of module updates. A Support Retainer starts at $1,500 a month and adds priority security patching, managed updates with QA and dedicated development hours. Prices rise with the support level, the number of sites and the service level agreement.
Founded: 2009, as Commerce Guys Offices: Greenville, South Carolina, United States; Pancevo, Serbia Known for: creating and maintaining Drupal Commerce Support plans: Production Support from $500 a month; Support Retainer from $1,500 a month Website: centarro.io
Summary written by TrustList from the business's own published information, Oct 2026.
An earned signal from verification, reviews, awards, transparency and engagement - the vendor can't buy it.
Updated 10/30/2026
No questions yet. Be the first to ask about Centarro.
Everything here links back to the same verified catalogue. Pick your next stop.