Vendidero vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Vendidero products: 3 record(s), with severity, exploitation and fixes.

Germanized for WooCommerce 1 Shiptastic for WooCommerce 1 Trusted Shops Easy Integration for WooCommerce 1

Exploited only (KEV) →

CVE-2026-96816 High · 7.1 CWE-79 Sep 30, 2026

WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

CVE-2026-65501 Medium · 5.3 CWE-639 Jul 23, 2026

WordPress Shiptastic for WooCommerce plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References (IDOR) in Shiptastic for WooCommerce <= 5.1.0 versions.

CVE-2026-2582 Medium · 6.5 CWE-94 Apr 14, 2026

Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution

The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.