VYPR

zipMoney(Zip Co) Payments Plugin for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-78361CriSep 10, 2026
    risk 0.59cvss 9.1epss 0.00

    The zipMoney(Zip Co) Payments Plugin for WooCommerce WordPress plugin before 2.4.0 does not perform any authorisation checks on one of its front-end request handlers, and does not restrict which option name a caller may supply, allowing unauthenticated users to delete arbitrary…