WooCommerce Vindi Pagamento vulnerabilities
We track 1 vulnerability in WooCommerce Vindi Pagamento products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest WooCommerce Vindi Pagamento vulnerabilities
- 7.5 High severity
WooCommerce Vindi Pagamento: Improper Neutralization of Input During Web Page Generation
The WooCommerce Vindi Pagamento WordPress plugin through 0.8.3 does not perform any authorisation check when updating an order's shipment tracking code, and does not escape that code when displaying it on the order edit page, allowing unauthenticated attackers