VYPR

Epeken All Kurir for Woocommerce

by WordPress

CVEs (1)

  • CVE-2026-16739Aug 14, 2026
    risk 0.00cvss epss

    The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.2 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attackers to mark arbitrary orders as…