TI-2026-03141 CVE-2026-3641 · GHSA-crgh-3rc5-vq96
Appmax <= 1.0.3 - Missing Authorization to Order Status Manipulation and Arbitrary Order Creation via Webhook Endpoint
Priority LOW 30
The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3.