Unrated severityNVD Advisory· Published Oct 31, 2026

CVE-2026-118184

Description

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in their shopping cart, allowing them to create orders for any product at an arbitrary total of their choosing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wpdm Premium Packagesllm-fuzzy
Range: <7.2.2
Package: https://wordpress.org/plugins/wpdm-premium-packages

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/38c4d58a-20a3-4309-ace7-5b567257c80e/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000