Description
Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mra13 / Team Tips and Tricks HQ | Simple Shopping Cart | ≤ 5.2.9 | — |
High · 7.5
CVE-2026-48868
EUVD-2026-36847GHSA-48rr-4889-hv7w
WordPress Simple Shopping Cart plugin <= 5.2.9 - Insecure Direct Object References (IDOR) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack