CVE-2026-14830

The CVE describes a vulnerability in the FlxWoo WordPress plugin prior to version 3.1.1 where the payment status of a checkout session is not verified with the payment processor before marking an order as paid. This allows unauthenticated attackers to complete WooCommerce orders without payment. ...

PT-2023-21370 · Unknown · Prestashop Lekerawen Ocs

Name of the Vulnerable Software and Affected Versions: PrestaShop lekerawen ocs versions prior to 1.4.1 Description: A SQL injection issue allows a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo and KerawenHelper::resetCheckoutSessionData components. Recommendation...