CVE-2026-118757 | PI Websolution Disable Payment Method for WooCommerce Plugin prior 1.1.10.9 AJAX class-apply-order-fees.php update_fees order_id authorization

October 29, 2026 Yanac

A vulnerability marked as critical has been reported in PI Websolution Disable Payment Method for WooCommerce Plugin. Affected is the function update_fees of the file class-apply-order-fees.php of the component AJAX Handler. Performing a manipulation of the argument order_id results in missing authorization.

This vulnerability is cataloged as CVE-2026-118757. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More