Threats tagged 'ghsa-pp3q-4jh2-gvr2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-113813The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership High2026-10-28GCVE DatabaseCVE-2026-113813 The PayPlug for WooCommerce WordPress plugin versions before 3.1.1 lack proper capability or ownership checks on certain unauthenticated AJAX actions. This flaw allows unauthenticated attackers to modify, read, and permanently delete arbitrary WooCommerce orders by supplying order identifiers. Report on CVE-2026-113813 Vulnerability #ghsa-pp3q-4jh2-gvr2	GCVE Database	2026-10-28

Page 1 of 1