https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T20:23:58.833667+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-118184 CVE-2026-118184 — Premium Packages < 7.2.2 - Unauthenticated Order Total Manipulation 2026-11-05T20:23:58.849838+00:00

Affected: Unknown Premium Packages

The Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting the stored price of items in their shopping cart, allowing them to create orders for any product at an arbitrary total of their choosing.