TI-2026-28425 CVE-2026-39448 · GHSA-84q6-57x9-mmj9
WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability
Priority LOW 39
Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.
coderpress
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
coderpress records in CISA KEVNo coderpress vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-20514 CVE-2026-25396 · GHSA-8mq2-frfg-qr49
WordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability
Priority LOW 39
Missing Authorization vulnerability in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Commerce Co…
TI-2024-11550 CVE-2024-12448 · GHSA-pm5w-x499-hmwp
Posts and Products Views for WooCommerce <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Posts and Products Views for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'papvfwc_views' shortcode in all versions up to, and including, 2.1 due to insufficient inpu…
TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Priority LOW 28
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…
TI-2026-05882 CVE-2026-6709 · GHSA-w945-6648-pwv3
Missing authorization in coderpress Coinbase Commerce for Contact Form 7
Priority LOW 19
The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2.