Threats tagged 'ghsa-2xcr-jvj8-gv2p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-10524CoCart (WordPress plugin) · External Control of Assumed-Immutable Web Parameter High7.5EPSS 0.4%2026-08-06CVE Database V5CVE-2026-10524 CVE-2026-10524 is a vulnerability in the CoCart WordPress plugin before version 4.9.0. It allows unauthenticated users to manipulate product prices by supplying arbitrary price values through a public REST API endpoint. This flaw enables attackers to complete WooCommerce orders at manipulated totals without validation against actual product prices. EPSS 0.4%Vulnerability CWE-472 #ghsa-2xcr-jvj8-gv2p	CVE Database V5	2026-08-06

Page 1 of 1