Miembros de
Boletines de Vulnerabilidades |
CVE-2026-9702 |
|
| Software afectado | WORDPRESS |
| The InPost PL WordPress plugin before 1.9.1 does not verify that the request originates from the legitimate buyer before allowing the WooCommerce order parcel-locker destination to be updated, allowing unauthenticated attackers to silently redirect the shipping destination of any pending or processing order on the site. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-9702 | |
