CVE record · 1 source
CVE-2026-94254
The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing…
- Vendor
- Cisco
- Product
- asa
- Exposure class
- Web platform, Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing…
The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing unauthenticated attackers to place orders for any purchasable product at a price…