CVE-2026-123124

The WooCommerce Vindi Pagamento WordPress plugin (versions through 0.8.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The issue stems from a lack of authorization checks when updating an order's shipment tracking code and a failure to escape that code when it is displayed on the order e...