Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #5

WordPress plugin Fundiin cho WooCommerce hit by authorization flaw

Original: 🚨 EUVD-2026-96752 📊 Score: n/a 📦 Product: Fundiin cho WooCommerce 🏢 Vendor: Unknown 📅 Updated: 2026-10-11 📝 The Fundiin

A new vulnerability listing, EUVD-2026-96752, flags the Fundiin cho WooCommerce WordPress plugin through version 3.4.0 for missing authorization checks on several of its REST API routes, relying instead on a credential that is insufficient. No severity score or identified vendor has been published, and the entry was updated on 11 October 2026. Site owners using the plugin are advised to review their exposure until a patch or vendor response emerges.

Why now: A newly disclosed authorization flaw in an unpatched WordPress plugin raises concerns for WooCommerce site operators.

Fundiin cho WooCommerceWordPressEUVD-2026-96752WooCommerce

Open on mastodon →

Evidence

• 🚨 EUVD-2026-96752 📊 Score: n/a 📦 Product: Fundiin cho WooCommerce 🏢 Vendor: Unknown 📅 Updated: 2026-10-11 📝 The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1834795