vendidero
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Germanized for WooCommerce | 2 | – | Oct 31, 2026 |
| Shiptastic for WooCommerce | 1 | – | Jul 23, 2026 |
| Trusted Shops Easy Integration for WooCommerce | 1 | – | Sep 30, 2026 |
Exploited and recent CVEs
- CVE-2026-109231 Germanized for WooCommerce <= 4.1.4 - Authenticated (Subscriber+) Unauthorized Access of Private Data via Activation Token Reuse via Activation Token Reuse After Email Change 0.4%
- CVE-2026-96816 WordPress Trusted Shops Easy Integration for WooCommerce plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-65501 WordPress Shiptastic for WooCommerce plugin <= 5.1.0 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2026-2582 Germanized for WooCommerce <= 3.20.5 - Unauthenticated Arbitrary Shortcode Execution 0.4%