2 matches found
CVE-2026-1128
The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could allow attackers to make a logged in admin remove them via a CSRF attack...
4.3CVSS5.8AI score0.00098EPSS
SaveExploits0References1
EUVD-2026-10001
The WP eCommerce WordPress plugin through 3.15.1 does not have CSRF check in place when deleting coupons, which could allow attackers to make a logged in admin remove them via a CSRF attack...
4.3CVSS5.9AI score0.00098EPSS
SaveExploits0References2
20