CVE-2026-118072
Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to manage orders before letting them add an order's customer details to the store's fraud blacklist, which could allow users with the Subscriber role and above to prevent arbitrary legitimate customers from placing orders.
| Vendor | unknown |
| Product | fraud prevention for woocommerce and edd |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown fraud prevention for woocommerce and edd
Be the first to know when new unknown vulnerabilities affecting unknown fraud prevention for woocommerce and edd are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Fraud Prevention For WooCommerce and EDD
0 < 2.3.6
References
Credits
Usama Arshad WPScan