Vulnerabilidades de Vendidero
CVEs publicadas que afetam produtos de Vendidero: 1 registro(s), com severidade, exploração e correções.
CVE-2026-2582
Média · 6.5
CWE-94 14/04/2026
Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution
The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.