← All advisories

Critical severity9.8NVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

CVE-2026-57677

CVE-2026-57677

Description

Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.

Affected products

1

WordPress/Novalnet Payment Gateway for WooCommercellm-fuzzy
Range: <=12.10.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/woocommerce-novalnet-gateway/vulnerability/wordpress-novalnet-payment-gateway-for-woocommerce-plugin-12-10-3-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.