Approved changes feed: RSS · Atom

cpe:2.3:a:montonio:montonio_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMontonio (39aeb5bd-b526-5978-a368-a30a5e4a9a80)
ProductMontonio For Woocommerce (59eb3359-b4a4-5dec-8fea-8bd8c83dd9f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48873 vulnerable 2026-07-29 00:55:01.726092 WordPress Montonio for WooCommerce plugin <= 10.1.2 - Broken Access Control vulnerability
HIGH (7.5)
Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions.
Published: 2026-06-15T20:18:58.759Z
Updated: 2026-06-16T13:48:33.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40700 vulnerable 2026-06-08 05:48:27.923797 Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins
HIGH (8.2)
Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M. Hofer (Frumph) PHPFreeChat, Arun Basil Lal Custom Login Admin Front-end CSS, Team Agence-Press CSS Adder By Agence-Press, Unihost Confirm Data, deano1987 AMP Toolbox amp-toolbox, Arun Basil Lal Admin CSS MU.This issue affects Montonio for WooCommerce: from n/a through 6.0.1; Wpopal Core Features: from n/a through 1.5.8; ArcStone: from n/a through 4.6.6; WooVirtualWallet – A virtual wallet for WooCommerce: from n/a through 2.2.1; WooVIP – Membership plugin for WordPress and WooCommerce: from n/a through 1.4.4; WooSupply – Suppliers, Supply Orders and Stock Management: from n/a through 1.2.2; Theme Minifier: from n/a through 2.0; Styles: from n/a through 1.2.3; WordPress Page Builder – Qards: from n/a through 1.0.5; PHPFreeChat: from n/a through 0.2.8; Custom Login Admin Front-end CSS: from n/a through 1.4.1; CSS Adder By Agence-Press: from n/a through 1.5.0; Confirm Data: from n/a through 1.0.7; AMP Toolbox: from n/a through 2.1.1; Admin CSS MU: from n/a through 2.6.
Published: 2024-01-19T14:30:11.427Z
Updated: 2026-04-28T16:07:49.226Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.