CVE-2026-78125 - The LearnPress WordPress plugin before 4.0.3 does not perform any authorization check on one of its REST endpoints in all versions up to, and including, 4.0.2, allowing unauthenticated attackers to disclose the payment status of arbitrary orders by enumerating order identifiers. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-78174 [未知] CVE-2026-78174 - WatchGuard Dimension records unredacted session ident…
• CVE-2026-61802 [中危] CVE-2026-61802 - Wazuh is an open-source security platform providing u…
• CVE-2026-61783 [未知] CVE-2026-61783 - Wazuh is an open-source security platform providing u…
• CVE-2026-77438 [高危] CVE-2026-77438 - Trilium is an open-source hierarchical note-taking ap…
• CVE-2026-81679 [高危] CVE-2026-81679 - OpenRemote versions before 1.28.0 contain a cross-rea…
• CVE-2026-81101 [中危] CVE-2026-81101 - The configure command accepted any endpoint URL and s…
• CVE-2026-78138 [中危] CVE-2026-78138 - The Finale Lite WordPress plugin before 2.21.0 does …
• CVE-2026-78125 [中危] CVE-2026-78125 - The LearnPress WordPress plugin before 4.0.3 does no…