CVE-2026-56048 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Payment Gateway Based Fees and Discounts for WooCommerce = 3.0.0 versions...

CVE-2025-57903

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPSuperiors Developer WooCommerce Additional Fees On Checkout Free woo-additional-fees-on-checkout-wordpress allows Stored XSS.This issue affects WooCommerce Additional Fees On Checkout Free: from...

CVE-2025-57903

CVE-2025-57903: Stored XSS in WooCommerce Additional Fees On Checkout (Free) for WordPress. Affected: WooCommerce Additional Fees On Checkout (Free) plugin, vulnerable component: input handling during checkout page generation. Impact per document: cross-site scripting resulting in stored XSS. Aff...