https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T18:50:33.487567+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-106008 fkie_cve-2026-106008 2026-11-10T18:50:33.510897+00:00

The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity checks before marking a WooCommerce order's SMS verification as completed, allowing unauthenticated users to forge the verified state of an order and bypass the plugin's SMS verification control.

 https://db.gcve.eu/vuln/ghsa-8r36-f247-525w GHSA-8r36-f247-525w 2026-11-10T18:50:33.511182+00:00

The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity checks before marking a WooCommerce order's SMS verification as completed, allowing unauthenticated users to forge the verified state of an order and bypass the plugin's SMS verification control.