Description
Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mercado Pago | Mercado Pago payments for WooCommerce | ≤ 8.9.0 | — |
Medium · 5.3
CVE-2026-28180
EUVD-2026-53952GHSA-qc5m-7r97-w8mq
WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerability
Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack