← CVE Intelligence

CVE-2026-28180

WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.

Affected (CNA)

Vendor / productVersions
Mercado Pago / Mercado Pago payments for WooCommerceaffected n/a through 8.9.0

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.