6.5
Medium
CVE-2026-56048 Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for…
Description
Unauthenticated Insecure Direct Object References (IDOR) in Payment Gateway Based Fees and Discounts for WooCommerce <= 3.0.0 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Payment Gateway Based Fees and Discounts for WooCommerce 3.0 | earliest → 3.0.0 | No fix stated |