CVE-2026-9240 | iscpcolissimo Colissimo Officiel Plugin up to 2.9.0 Shipping Method updateShippingMethod order_id improper authorization

SecurityVulns
Yanac

A vulnerability was found in iscpcolissimo Colissimo Officiel Plugin up to 2.9.0. It has been declared as problematic. This issue affects the function updateShippingMethod of the component Shipping Method Handler. Executing a manipulation of the argument order_id can lead to improper authorization.

The identification of this vulnerability is CVE-2026-9240. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More