vendidero

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

vendidero records in CISA KEV

No vendidero vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-02205 CVE-2026-2582 · GHSA-3969-r7gw-3f9q

Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution

LOW 35

The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00424 Published 2026-04-14 No fix listed CWE-94

TI-2026-63878 CVE-2026-96816 · GHSA-hr6c-7x6v-rj9r

WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-09-30 No fix listed CWE-79

TI-2026-46671 CVE-2026-65501 · GHSA-jm5r-8xqc-j74x

WordPress Shiptastic for WooCommerce plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability

LOW 30

Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00313 Published 2026-07-23 No fix listed CWE-639

TI-2026-83536 CVE-2026-109231 · GHSA-c79g-76jm-qrx5

Activation token reuse in Germanized for WooCommerce exposes orders

LOW 20

The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versions up to, and including, 4.1.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00369 Published 2026-10-31 No fix listed CWE-841

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0