Skip to content
OpenAdvisories

Vendor

strablengineering

1 known vulnerabilities.

Products

STRABL – A checkout solution 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-3640

    STRABL <= 4.5 - Unauthenticated Arbitrary Webhook Creation via REST API Endpoint

    The STRABL – A checkout solution plugin for WordPress is vulnerable to Missing Authentication in all versions up to and including 4.5. The plugin registers a REST API webhook endpoint at /wp-json/strabl/webhook/order with a permission_callback of __return_tru…

    strablengineering STRABL – A checkout solution Web / CMS