Düşük CVSS 3.7
CVE-2026-101166: CVE-2026-101166: eksik yetkilendirme
Açıklama (NVD)
The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products.
Özet bilgiler
- CVSS v3.1
- 3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - EPSS
- %0,24 (yüzdelik 16)
- CWE
- CWE-862
- Yama
- Yok / bilinmiyor