Vulnerabilities

TI-2026-69923 CVE-2026-94568 · GHSA-qh49-6wvm-jfrp

PHP object injection in Pay with Vipps for WooCommerce plugin

LOW 34

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: from n/a through 6.2.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00359 Published 2026-10-09 No fix listed CWE-502

TI-2026-63996 CVE-2026-97259 · GHSA-p263-vqc6-hg4w

WordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability

LOW 23

Authorization Bypass Through User-Controlled Key vulnerability in WP Hosting AS Pay with Vipps for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00213 Published 2026-09-30 No fix listed CWE-639

Vulnerabilities

Filters

PHP object injection in Pay with Vipps for WooCommerce plugin

WordPress Pay with Vipps for WooCommerce plugin <= 6.2.4 - Insecure Direct Object References (IDOR) vulnerability