CVE-2026-110125 waynboot-mall through 2.0.0 IDOR via Mobile Order Endpoints

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential order ids or serial numbers via detail, cancel, confirm,...

CVE-2026-110125

Waynboot-mall through version 2.0.0 is susceptible to an Insecure Direct Object Reference (IDOR) vulnerability. Authenticated members can access and modify the orders of other members by supplying specific order identifiers. By enumerating sequential order IDs or serial numbers, an attacker can i...