CVE-2026-14830

The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment processor that a checkout session was actually paid before marking the associated order as paid, allowing unauthenticated attackers to complete WooCommerce orders without paying...

PT-2026-56415

Name of the Vulnerable Software and Affected Versions Tutor LMS WordPress plugin versions prior to 3.9.14 Description The plugin fails to properly verify enrollment when restricting access to protected course content. This allows authenticated users with subscriber-level access or higher, who are...