19256 matches found
CVE-2026-12584
Technical details (affected versions, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-10599
The CVE concerns the Integrate PhonePe with WooCommerce WordPress plugin (versions up to 1.2.1). The root cause is that the plugin does not validate that a verified payment transaction belongs to the order being marked as paid, nor verify the authenticity of the payment-completion request. This a...
CVE-2026-10599 Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID Reuse
The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it verify the authenticity of its payment-completion request, allowing unauthenticated attackers to reuse a single valid...
CVE-2026-66711
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66707
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66692
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
CVE-2026-65559
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...
CVE-2026-28169
Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier = 2.52.0 versions...
CVE-2026-28180
Unauthenticated Insecure Direct Object References IDOR in Mercado Pago payments for WooCommerce = 8.9.0 versions...
CVE-2026-28005
Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...
EUVD-2026-53914
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66711
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66711 WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WooCommerce Multilingual & Multicurrency = 5.5.6 versions...
CVE-2026-66711
CVE-2026-66711 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress plugin WooCommerce Multilingual & Multicurrency, affecting versions up to and including 5.5.6. The connected documents confirm the affected product and the XSS vulnerability type but do not provide technical explo...
CVE-2026-66707
CVE-2026-66707 describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Facebook for WooCommerce up to version 3.7.5. The CVE is documented across multiple sources (NVD, CVE List, EUVD, Patchstack). The vulnerability affects the plugin’s handling of input that...
CVE-2026-66707 WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
EUVD-2026-53910
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66707
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
