← Database

CVE-2026-106008

MEDIUM CVSS: 5.3 Published: 2026-11-09 Modified: 2026-11-09

Description

The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity checks before marking a WooCommerce order's SMS verification as completed, allowing unauthenticated users to forge the verified state of an order and bypass the plugin's SMS verification control.

Affected Platforms

Unknown

Weakness Type

CWE-862

References