Unrated severityNVD Advisory· Published Nov 4, 2026

CVE-2026-118403

Description

The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order before returning its details, allowing unauthenticated visitors who know a guest order's identifier to view its order status, payment status and total.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wpdm Premium Packagesllm-fuzzy
Range: <7.3.1
Package: https://wordpress.org/plugins/wpdm-premium-packages

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d316f5c9-51f3-43d7-9ffe-e47ab7187dcb/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000