UNKNOWN NVD

CVE-2026-118184

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in their shopping cart,

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in their shopping cart, allowing them to create orders for any product at an arbitrary total of their choosing.

References

https://wpscan.com/vulnerability/38c4d58a-20a3-4309-ace7-5b567257c80e/

Published: 2026-10-31 · Source: NVD · Feed updated: 2026-10-31

This unknown severity vulnerability was published on 2026-10-31 via NVD.

vulnfeed aggregates 18441 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.