CoderPress
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Coinbase Commerce for Contact Form 7 | 1 | – | May 12, 2026 |
| Commerce Coinbase For WooCommerce | 1 | – | Mar 25, 2026 |
| NOWPayments for WooCommerce | 1 | – | Jul 2, 2026 |
| Posts and Products Views for WooCommerce | 1 | – | Dec 14, 2024 |
Exploited and recent CVEs
- CVE-2026-39448 WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-6709 Coinbase Commerce for Contact Form 7 <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7_api_key' Parameter 0.2%
- CVE-2026-25396 WordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability 0.3%
- CVE-2024-12448 Posts and Products Views for WooCommerce <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%