anonhaven

CVE-2026-118184

NONE EPSS 0.14%
Updated Oct 31, 2026
Unknown
Parameter Value
Affected Versions before 7.2.2
Type CWE-862 Missing Authorization
Vendor Unknown
Public PoC No

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in their shopping cart, allowing them to create orders for any product at an arbitrary total of their choosing.

Weakness Type (CWE)

CWE-862 Missing Authorization

Vulnerable Products

unknown:premium packages

References 1

https://wpscan.com/vulnerability/38c4d58a-20a3-4309-ace7-5b567257c80e/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-94361

Unknown

None

CVE-2026-82214

Unknown

None

CVE-2026-118638

Unknown

None

CVE-2026-118629

Unknown

None

CVE-2026-118438

Unknown

None