fraud_prevention_for_woocommerce_and_edd vulnerabilities

CVEs whose affected-version data names the fraud_prevention_for_woocommerce_and_edd package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118072Medium· 5.4

1w ago

Fraud Prevention For WooCommerce and EDD < 2.3.6 - Subscriber+ Arbitrary Customer Blacklisting

The Fraud Prevention For WooCommerce and EDD WordPress plugin before 2.3.6 does not check that a user is allowed to manage orders before letting them add an order's customer details to the store's fraud blacklist, which could allow users…

▾ SunlitEPSS 0.17%via CVEORG