Critical severity9.1NVD Advisory· Published Jul 10, 2026· Updated Jul 13, 2026
CVE-2026-15089
CVE-2026-15089
Description
vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.
Affected products
2- Package: https://wordpress.org/plugins/drupal
Patches
Vulnerability mechanics
References
1News mentions
2- Drupal: Ten Security Advisories Released Together on July 8, 2026Vypr Intelligence · Jul 8, 2026
- Drupal: Five Security Advisories Disclosed Together on July 8, 2026Vypr Intelligence · Jul 8, 2026