← Database

CVE-2026-101166

N/A CVSS: N/A Published: 2026-11-04 Modified: 2026-11-04

Description

The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products.

Affected Platforms

Unknown

Weakness Type

Unknown

References