VYPR

Komfortkasse for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-122001Nov 7, 2026
    risk 0.00cvss —epss —

    The Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of REST API requests, overriding WordPress's own nonce verification so that a request forged in a logged-in administrator's browser is accepted, which can be used to create…