Threats tagged 'ghsa-3xwg-74wr-vh24'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-106027The Oxygen MyData for WooCommerce WordPress plugin before 3.0.9 does not have proper authorisation, nor validate the High2026-11-12GCVE DatabaseCVE-2026-106027 The Oxygen MyData for WooCommerce WordPress plugin versions before 3.0.9 lack proper authorization and do not validate the authenticity of requests on a payment callback. This flaw allows unauthenticated users to mark arbitrary WooCommerce orders as completed. Report on CVE-2026-106027 Vulnerability #ghsa-3xwg-74wr-vh24	GCVE Database	2026-11-12

Page 1 of 1