Description
Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kirillbdev | WC Ukraine Shipping | ≤ 1.22.3 | — |
High · 7.1
CVE-2026-84836
EUVD-2026-70568GHSA-q2wh-hx7h-mvxr
WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 3, 2026 · Updated Sep 3, 2026 · Assigned by Patchstack