UNKNOWN NVD

CVE-2026-94254

The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing unauthentica

The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing unauthenticated attackers to place orders for any purchasable product at a price of their own choosing.

References

https://wpscan.com/vulnerability/e99f69f2-1a21-42fa-b122-ecf69856cc39/

Published: 2026-10-14 · Source: NVD · Feed updated: 2026-10-14

This unknown severity vulnerability was published on 2026-10-14 via NVD.

vulnfeed aggregates 14664 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.