CVE-2026-57677 — WordPress Novalnet Payment Gateway for WooCommerce plugin <= 12.10.3 - PHP Object Injection vulnerability

CVE-2026-57677

WordPress Novalnet Payment Gateway for WooCommerce plugin <= 12.10.3 - PHP Object Injection vulnerability PUBLISHED

Description (CNA)

Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10.3 versions.

Vendor / product	Versions
Novalnet / Novalnet Payment Gateway for WooCommerce	affected n/a through 12.10.3

CWE-502

CISA-ADP

No English description supplied.

No references supplied.