Skip to content
OpenAdvisories

Vendor

vendidero

4 known vulnerabilities.

Products

Germanized for WooCommerce 2 Shiptastic for WooCommerce 1 Trusted Shops Easy Integration for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-109231

    Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Change

    The Germanized for WooCommerce plugin for WordPress is vulnerable to Unauthorized Access of Private Data via Activation Token Reuse in versions up to, and including, 4.1.4. This is due to the `on_user_email_changed` hook — which is responsible for rotating th…

    vendidero Germanized for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2026-65501

    WordPress Shiptastic for WooCommerce plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions.

    vendidero Shiptastic for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2026-2582

    Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution

    The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not p…

    vendidero Germanized for WooCommerce Web / CMS