Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-56048 EUVD-2026-39709GHSA-9p3j-8vjx-24pq

WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability

Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack

Vendor: Tyche Softwares Product: Payment Gateway Based Fees and Discounts for WooCommerce Category: Web / CMS

Description

Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.

Affected products

VendorProductAffectedFixed
tychesoftwares Payment Gateway Based Fees and Discounts for WooCommerce ≤ 3.0.0 —

References