https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T21:56:00.753865+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-101166 CVE-2026-101166 — Mollie Payments for WooCommerce < 8.2.0 - Unauthenticated Unpublished Product Purchase via mollie_paypal_create_order 2026-11-11T21:56:00.755252+00:00

Affected: Unknown Mollie Payments for WooCommerce

The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products.