WordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by devploit in WordPress Plugin Checkout Files Upload for WooCommerce versions = 2.2.5...

@0l00000l/auth (>=1.0.0 <=1.0.8), @0xchain/telemetry (>=1.1.0-beta.8 <=1.1.0-beta.18) +990 more potentially affected by CVE-2026-44293 via protobufjs (>=8.0.0 <=8.0.1)

protobufjs NPM version =8.0.0, =1.0.0, =1.1.0-beta.8, =0.8.0, =1.0.0, =1.1.4, =2.1.4, =0.3.1, =0.3.1, =0.7.1, =0.9.0 - @access-mcp/software-discovery =0.8.0 and more Source cves: CVE-2026-44293 Source advisory: SNYK:JS-PROTOBUFJS-16643421...

GHSA-X23J-RGR4-MP7M vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-40129

creationtimestamp| type| source ---|---|--- 2026-05-12 05:02:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlmz4iwkgu2q 2026-05-12 14:20:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybnopq22h 2026-05-12 14:25:06+00:00| seen|...

CGA-MFC8-8VXC-99R4

Bulletin has no description...

CGA-33W8-VVG7-W4MH

Bulletin has no description...

MINI-MF6R-896G-F6W8

Bulletin has no description...

MINI-MCRG-85V8-VR6P

Bulletin has no description...

MINI-W737-RP7H-6X4Q

Bulletin has no description...

MINI-V3QQ-HQPF-8V99

Bulletin has no description...

MINI-RF29-J78H-M7FQ

Bulletin has no description...

MINI-R2G7-7PHH-Q357

Bulletin has no description...

MINI-QWQX-P3X2-7RGP

Bulletin has no description...

MINI-Q996-4R64-65RH

Bulletin has no description...

MINI-Q96W-93JG-WQQF

Bulletin has no description...

MINI-PQ26-X4WH-97FF

Bulletin has no description...

MINI-P5WH-H5QV-M5VM

Bulletin has no description...

MINI-PCWX-MC94-FPCW

Bulletin has no description...

MINI-J6W3-6937-GM5X

Bulletin has no description...

MINI-38MP-539P-23QJ

Bulletin has no description...