Skip to content
OpenAdvisories

Vendor

Mestres do WP

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2266 Public exploit

    Checkout Mestres do WP for WooCommerce 8.6.5 - 8.7.5 - Unauthenticated Arbitrary Options Update

    The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. This mak…