CVE-2026-48868 — WordPress Simple Shopping Cart plugin <= 5.2.9 - Insecure Direct Object References (IDOR) vulnerability

CVE-2026-48868

WordPress Simple Shopping Cart plugin <= 5.2.9 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.

Vendor / product	Versions
mra13 / Team Tips and Tricks HQ / Simple Shopping Cart	affected n/a through 5.2.9

CWE-639

CISA-ADP

No English description supplied.

No references supplied.