Vulnerabilities

TI-2026-28425 CVE-2026-39448 · GHSA-84q6-57x9-mmj9

WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability

LOW 39

Unauthenticated Broken Access Control in NOWPayments for WooCommerce <= 1.4.0 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2026-07-02 No fix listed CWE-862

TI-2026-05882 CVE-2026-6709 · GHSA-w945-6648-pwv3

Missing authorization in coderpress Coinbase Commerce for Contact Form 7

LOW 19

The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00208 Published 2026-05-12 No fix listed CWE-862

TI-2026-20514 CVE-2026-25396 · GHSA-8mq2-frfg-qr49

WordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Commerce Co…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00272 Published 2026-03-25 No fix listed CWE-862

TI-2024-11550 CVE-2024-12448 · GHSA-pm5w-x499-hmwp

Posts and Products Views for WooCommerce <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Posts and Products Views for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'papvfwc_views' shortcode in all versions up to, and including, 2.1 due to insufficient inpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00301 Published 2024-12-14 No fix listed CWE-79

TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks