Threats tagged 'ghsa-8r36-f247-525w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-106008The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity Medium5.32026-11-09GCVE DatabaseCVE-2026-106008 The FraudLabs Pro SMS Verification WordPress plugin versions 1.11.2 through 1.12.1 have a vulnerability where they do not perform authorization or validity checks before marking a WooCommerce order's SMS verification as completed. This flaw allows unauthenticated users to forge the verified state of an order, effectively bypassing the SMS verification control. Report on CVE-2026-106008 Vulnerability #ghsa-8r36-f247-525w	GCVE Database	2026-11-09

Page 1 of 1