CVE-2026-78137

The StoreGrowth WordPress plugin, in versions before 2.1.2 , fails to validate a browser-supplied product price on two of its unauthenticated actions. This allows an unauthenticated attacker to add a product to the cart at an arbitrary, attacker-chosen price , which carries through to the checkou...