Filtered by vendor Wordpress-extensions
Subscriptions
Filtered by product Yaycurrency
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16058 | 1 Wordpress-extensions | 1 Yaycurrency | 2026-11-11 | 5.3 Medium |
| The YayCurrency WordPress plugin before 3.3.5 does not perform any capability or ownership check on several of its multi-vendor integration handlers that are reachable by unauthenticated users, allowing anyone to read the store's order totals and its vendors' earnings, balance ledgers, and withdrawal histories by iterating identifiers. | ||||
Page 1 of 1.