{"items":[{"id":"CVE-2026-39448","published":"2026-07-02T11:15:01.778Z","updated":"2026-07-02T12:11:44.427Z","title":"WordPress NOWPayments for WooCommerce plugin <= 1.4.0 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"CoderPress","product":"NOWPayments for WooCommerce","kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2026-6709","published":"2026-05-12T07:48:25.266Z","updated":"2026-05-12T21:13:48.903Z","title":"Coinbase Commerce for Contact Form 7 <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) API Key Modification via 'cccf7_api_key' Parameter","severity":"MEDIUM","score":4.3,"vendor":"coderpress","product":"Coinbase Commerce for Contact Form 7","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-25396","published":"2026-03-25T16:14:47.683Z","updated":"2026-04-29T09:51:57.261Z","title":"WordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"CoderPress","product":"Commerce Coinbase For WooCommerce","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2024-12448","published":"2024-12-14T04:23:44.119Z","updated":"2026-04-08T17:13:45.712Z","title":"Posts and Products Views for WooCommerce <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"coderpress","product":"Posts and Products Views for WooCommerce","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2022-4974","published":"2024-10-16T06:43:30.014Z","updated":"2026-04-08T16:46:54.861Z","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks","severity":"MEDIUM","score":6.3,"vendor":"dashlabsltd","product":"YASR – Yet Another Star Rating Plugin for WordPress","kev":false,"epss":0.00442,"kevAdded":null}]}