CVE-2026-18945

The CVE-2026-18945 entry concerns the WP Helper Premium WordPress plugin (version prior to 4.7.6). The underlying issue is that the plugin does not verify the order key when rendering the custom order confirmation page or handling related AJAX actions. This permits unauthenticated users to view o...