CVE Alert & Security Feed

Stats Digest Feeds

← Back to all CVEs

CVE-2026-56048

MEDIUM NVD

CVSS Score 6.5

Severity MEDIUM

Published Jun 26, 2026

Vendor unknown

Description

Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.

References

https://patchstack.com/database/wordpress/plugin/checkout-fees-for-woocommerce/vulnerability/wordpress-payment-gateway-based-fees-and-discounts-for-woocommerce-plugin-3-0-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve