vendidero vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-96816Trusted Shops Easy Integration for WooCommerce (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96816 Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions. EPSS 0.2%Vulnerability vendidero CWE-79	CVE Database V5	2026-09-30
Medium	5.3	EPSS 0.3%	CVE-2026-65501Shiptastic for WooCommerce (WordPress plugin) · Insecure Direct Object Reference Medium5.3EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65501 Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions. EPSS 0.3%Vulnerability vendidero CWE-639	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.4%	CVE-2026-2582Germanized for WooCommerce (WordPress plugin) · Code Injection Medium6.5EPSS 0.4%2026-04-14CVE Database V5CVE-2026-2582 The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. EPSS 0.4%Vulnerability vendidero CWE-94	CVE Database V5	2026-04-14

Page 1 of 1