← All advisories

Unrated severityNVD Advisory· Published Jun 26, 2026· Updated Jun 29, 2026

WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

CVE-2026-56048

Description

Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.

Affected products

1

WordPress/Payment Gateway Based Fees and Discounts for WooCommercellm-fuzzy
Range: <=3.0.0

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/checkout-fees-for-woocommerce/vulnerability/wordpress-payment-gateway-based-fees-and-discounts-for-woocommerce-plugin-3-0-0-insecure-direct-object-references-idor-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.