CVE-2026-118403 — 脆弱性インテリジェンス

—

公表日: 2026-11-04T06:17:02.693

CVSS

3.7

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

The Premium Packages WordPress plugin before 7.3.1 does not verify that the requester owns a guest order before returning its details, allowing unauthenticated visitors who know a guest order's identifier to view its order status, payment status and total.

情報源

• CVE-2026-118403
• Original advisory