UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-101166
The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-11-04T09:33:16.411751+00:00
- Cve id
- CVE-2026-101166
- First seen by Signal
- 2026-11-04T09:34:19+00:00
- Retrieved at
- 2026-11-04T09:34:19+00:00
- Published at
- 2026-11-04T06:16:57.037
- Last modified
- 2026-11-04T06:16:57.037
Explore deeper with Ninja Signal's threat intelligence graph