CVE-2026-28180 | Mercado Pago Plugin up to 8.9.0 on WordPress resource injection

August 6, 2026 Yanac

A vulnerability, which was classified as critical, was found in Mercado Pago Plugin up to 8.9.0 on WordPress. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to improper control of resource identifiers.

The identification of this vulnerability is CVE-2026-28180. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More