Alma

Products

ProductCVEsExploitedLatest
Alma1–Feb 19, 2026
Alma – Pay in installments or later for WooCommerce1–Dec 14, 2023

Exploited and recent CVEs

  • CVE-2026-24999 Medium 5.3 WordPress Alma plugin <= 5.16.1 - Broken Access Control vulnerability 0.2%
  • CVE-2023-50369 Medium 6.5 WordPress Alma – Pay in installments or later for WooCommerce Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS) 0.4%