CVE-2026-16620

The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an unauthenticated visitor to add such a product to the cart at an arbitrary value below the merchant-defined allowed...

CVE-2026-16620 WPC Name Your Price for WooCommerce < 2.2.5 - Unauthenticated Price Manipulation via Select Mode

The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products configured in "Select" price mode, allowing an unauthenticated visitor to add such a product to the cart at an arbitrary value below the merchant-defined allowed...

MSC-2024-16620

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2018-17606

CVE-2018-17606 is rejected; this candidate is a reservation duplicate of CVE-2018-16620.

CVE-2018-16620

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

CVE-2018-16620

Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control...

CVE-2018-16620

The CVE-2018-16620 entry concerns Sonatype Nexus Repository Manager prior to 3.14, with Improper/Incorrect Access Control. Multiple connected sources confirm the issue arises from failing to enforce access controls, enabling a misbehavior that could let an attacker reach other hosts or open ports...