Threats tagged 'ghsa-qc5m-7r97-w8mq'

CVE-2026-28180 is a medium severity vulnerability in Mercado Pago payments for WooCommerce versions up to and including 8.9.0. It involves an unauthenticated Insecure Direct Object Reference (IDOR) vulnerability, classified under CWE-639, which allows authorization bypass through a user-controlled key. This vulnerability could allow an attacker to access certain resources without proper authorization. No official patch or remediation guidance is currently available from the vendor.