CVE Intelligence

Vendidero Germanized for WooCommerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Vendidero Germanized for WooCommerce: 1 record(s), with affected versions and fixes.

CVE-2026-2582 Medium · 6.5 CWE-94 Apr 14, 2026
Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution
The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.