CVE-2026-84836 — WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability

CVE-2026-84836

WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Subscriber Insecure Direct Object References (IDOR) in WC Ukraine Shipping <= 1.22.3 versions.

Vendor / product	Versions
kirillbdev / WC Ukraine Shipping	affected n/a through 1.22.3

CWE-639

CISA-ADP

No English description supplied.

No references supplied.